Back Sploitus

cve-2024-10220

Sploitus • September 23, 2026

Этот репозиторий используется для тестирования CVE-2024-10220 (уязвимость gitRepo volume в Kubernetes) в рамках исследований безопасности HPC в Университете Центрального Оклахомы.

**ПРЕДУПРЕЖДЕНИЕ:** Этот репозиторий содержит вредоносный Git-хук для контролируемого тестирования безопасности. Не используйте в производственных средах.

* **Компонент:** gitRepo volumes в kubelet Kubernetes

* **Влияние:** Произвольное выполнение команд на узлах Kubernetes

Этот репозиторий является частью сравнительного анализа безопасности планировщиков заданий HPC (Slurm, HTCondor, Kubernetes).

The full story

This article is one source in a clustered incident — the cluster page carries the summary, timeline and every other outlet covering it.

New Vulnerabilities Discovered in Kubernetes and WordPress Two significant vulnerabilities have been reported: CVE-2024-10220 and CVE-2017-20192. CVE-2024-10220 affects gitRepo volumes in Kubernetes, allowing arbitrary command execution on Kubernetes nodes. This vulnerability was published on November 22, 2024, with a proof-of-concept (PoC) available since November 21, 2024. The testing repository is part of security research at the University of Central Oklahoma, but it contains a malicious Git hook and should not be used in production. CVE-2017-20192, related to Formidable Forms in WordPress, allows stored XSS attacks and was published on October 16, 2024. A PoC for this vulnerability is expected to be publicly available by December 24, 2025. Both vulnerabilities pose risks to their respective platforms, with CVE-2024-10220 being particularly critical due to its potential for remote command execution. 2 sources 55

Extracted Entities

cve-2024-10220

The full story

Extracted Entities

Attack Types (1)

CVEs (1)

MITRE ATT&CK (1)

Platforms (1)

Tools (1)