cve/2024/CVE-2024-10220.md

CVE-2024-10220

Description

The Kubernetes kubelet component allows arbitrary command execution via specially crafted gitRepo volumes.This issue affects kubelet: through 1.28.11, from 1.29.0 through 1.29.6, from 1.30.0 through 1.30.2.

POC

Reference

No PoCs from references.

Github

• https://github.com/PuddinCat/GithubRepoSpider
• https://github.com/XiaomingX/cve-2024-10220-githooks
• https://github.com/XiaomingX/nice-juejin-article
• https://github.com/XiaomingX/weekly
• https://github.com/any2sec/cve-2024-10220
• https://github.com/candranapits/poc-CVE-2024-10220
• https://github.com/filipzag/CVE-2024-10220
• https://github.com/mochizuki875/CVE-2024-10220-githooks
• https://github.com/mrk336/CVE-2024-10220-Kubernetes-gitRepo-Volume-Vulnerability
• https://github.com/nomi-sec/PoC-in-GitHub
• https://github.com/orgC/CVE-2024-10220-demo
• https://github.com/plzheheplztrying/cve_monitor