CVE-2015-5305: Directory Traversal in Kubernetes
Summary
CVE-2015-5305: Directory Traversal in Kubernetes. Affects github.com/kubernetes/kubernetes versions < 1.1.1. Fixed in 1.1.1. How to fix ↓
Also tracked for
- k8s.io/kubernetes · Go
The same CVE-2015-5305 is tracked separately for each ecosystem and vendor. Its fix information is the same; the package and affected versions differ.
Check if this vulnerability affects your application
Upload a manifest or SBOM and we'll show whether you're affected, plus every other risky package in the same scan.
No signup required · Results in about 60 seconds
Habilume
Habit tracker with a companion that grows with you
Complete habits, earn Lume Points, and watch your Lume grow as you stay consistent.
Background
Kubernetes is an open-source container orchestration platform used in Red Hat OpenShift Enterprise 3.0. It provides a framework for automating deployment, scaling, and management of containerized applications. Kubernetes is written in Go and is widely adopted in the industry for managing containerized environments. However, a directory traversal vulnerability has been discovered in Kubernetes, which allows attackers to write to arbitrary files by exploiting a flaw in the handling of object type names before passing them to etcd.
Vulnerability Detail
The directory traversal vulnerability in Kubernetes (CVE-2015-5305) enables attackers to write to arbitrary files by manipulating the object type name. This vulnerability can be exploited by crafting a specific object type name, which is not properly handled before being passed to etcd. By exploiting this vulnerability, an attacker can gain unauthorized write access to sensitive files, potentially leading to data manipulation, privilege escalation, or denial of service attacks. The severity of this vulnerability is rated as MODERATE with a CVSS score of 6.5.
How To Fix
Latest published version: v1.14.10 as of 23 Oct 2026
go get github.com/kubernetes/kubernetes@v1.14.10Upgrading to it may include breaking changes; the version below is the minimum fixed release for this vulnerability.
If you need the minimum change
1.1.1
This is the first release that contains the fix.
go get github.com/kubernetes/kubernetes@v1.1.1Tip — Not sure which version your app runs? Vulert can match this fix to it. Scan free →
Workaround
There is no specific workaround mentioned for this vulnerability. The recommended solution is to update Kubernetes to the fixed version.
Conclusion
In conclusion, the directory traversal vulnerability in Kubernetes (CVE-2015-5305) can be mitigated by updating to the fixed version. It is important to keep Kubernetes installations up to date to ensure the security of containerized environments. For further support on vulnerability remediation, contact DevNack.com.
See every vulnerability recorded for github.com/kubernetes/kubernetes →
FAQ
Kubernetes is an open-source container orchestration platform used for automating deployment, scaling, and management of containerized applications.
The vulnerability allows attackers to write to arbitrary files, potentially leading to data manipulation, privilege escalation, or denial of service attacks.
To fix this vulnerability, update Kubernetes to version 1.1.1 or later.
There is no specific workaround mentioned for this vulnerability. Updating to the fixed version is recommended.
The severity of this vulnerability is rated as MODERATE with a CVSS score of 6.5.
References
Related vulnerabilities
Recent vulnerabilities recorded for github.com/kubernetes/kubernetes.
Habilume
Habit tracker with a companion that grows with you
Complete habits, earn Lume Points, and watch your Lume grow as you stay consistent.
