pentester.land· May 30, 2021· by Etienne Champetier / champtar🔍 CVE-2021-30465

runc mount destinations can be swapped via symlink-exchange to cause mounts outside the rootfs (CVE-2021-30465)

Open Original Article ↗
Target Program: Google
🎯 Vulnerability: Web Security Vulnerability
💡 Defense Fix: Implement strict input validation, contextual output encoding, and enforce least-privilege authorization controls.
#Kubernetes#Container escape#CVE-2021-30465