What’s Vulnerable › Vulnerabilities

CVE-2022-3172: Kubernetes - API server - Aggregated API server can cause clients to be redirected (SSRF)

• Severity: high (CVSS 8.2 v3.1)
• Exploited in the wild: not listed in CISA KEV
• EPSS: 2.5% probability of exploitation in the next 30 days
• Public exploit or detection template: none known
• Published: 2023-11-03 · updated 2026-06-17
• Weakness: CWE-918

Description

A security issue was discovered in kube-apiserver that allows an aggregated API server to redirect client traffic to any URL. This could lead to the client performing unexpected actions as well as forwarding the client's API server credentials to third parties.

Affected products

• Kubernetes kube-apiserver: through 1.21.14; from 1.22.0 before 1.22.14; from 1.23.0 before 1.23.11; from 1.24.0 before 1.24.5; 1.25.0 — fixed in 1.22.14, 1.23.11, 1.24.5

How to fix

Upgrade to a fixed version: Kubernetes kube-apiserver 1.22.14, 1.23.11, 1.24.5. Check the vendor advisory for mitigations.

References

• https://github.com/kubernetes/kubernetes/issues/112513
• https://groups.google.com/g/kubernetes-security-announce/c/_aLzYMpPRak
• https://security.netapp.com/advisory/ntap-20231221-0005/
• https://github.com/kubernetes/kubernetes/issues/112513
• https://groups.google.com/g/kubernetes-security-announce/c/_aLzYMpPRak
• https://security.netapp.com/advisory/ntap-20231221-0005/

Get alerted when CVE-2022-3172 or the next vulnerability affects your stack