Disclosing a directory traversal vulnerability in Kubernetes copy – CVE-2019-1002101
A researcher reported CVE-2019-1002101 to the Kubernetes and OpenShift security teams on March 4, a flaw in kubectl cp where the untar function can create and follow symbolic links from tar headers, letting a malicious container write files to arbitrary...