CVE-2019-11255

score

<0.1

cvss

4.8

epss

2.0%

published

2019-12-05

kev added

—

first seen

2026-10-21

Kubernetes CSI sidecar containers for external-provisioner, external-snapshotter, and external-resizer contain a improper input validation caused by insufficient validation in their components, letting attackers access or modify PersistentVolume data during snapshot, restore, cloning, or resizing operations, exploit requires attacker to control input data.