CVE-2020-8561

score

<0.1

cvss

4.1

epss

2.1%

published

2021-09-20

kev added

—

first seen

2026-10-21

Kubernetes contains a security issue where actors controlling MutatingWebhookConfiguration or ValidatingWebhookConfiguration responses can redirect kube-apiserver requests to private networks, letting them view redirected responses and headers in logs when log level is 10, exploit requires control over webhook responses and access to logs.