Medium
Security advisory
Improper input validation in Kubernetes CSI sidecar containers for external-provisioner (
- Products
- Not specified
- Affected versions
- Not specified
- Fixed versions
- Not specified
- CVEs
- CVE-2019-11255
- Confirmed fixed CVEs
- Not specified
- Updated in this feed
- 1 Nov 2026, 08:36 UTC · Revision 1
Source evidence
Improper input validation in Kubernetes CSI sidecar containers for external-provisioner (
osv:CVE-2019-11255
Complete source record
{
"id": "4b6dc584fff3929fa5a41cdf41d748f87ac129c42330207a61515773af20c21f",
"url": "https://osv.dev/vulnerability/CVE-2019-11255",
"method": "structured",
"payload": {
"kind": "advisory",
"title": "CVE-2019-11255",
"summary": "Improper input validation in Kubernetes CSI sidecar containers for external-provisioner (",
"evidence": "osv:CVE-2019-11255",
"products": [],
"severity": "medium",
"structured": {
"id": "CVE-2019-11255",
"aliases": [
"CVE-2019-11255",
"GHSA-f4w6-3rh6-6q4q"
],
"metrics": [
{
"type": "CVSS_V3",
"score": "CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:N"
}
],
"affected": [
{
"ranges": [
{
"repo": "https://github.com/kubernetes-csi/external-provisioner",
"type": "GIT",
"events": [
{
"introduced": "673bd220cbf78ba69180077523f35a072ed948d2"
},
{
"last_affected": "3aa7a5d8067b030c42374210b0766de394062000"
},
{
"introduced": "16f5327a442fd4c0db10edd029cc6eef167db9c7"
},
{
"last_affected": "9a258a0accf64d688f312697db871ceaf42e6478"
},
{
"introduced": "cecb5a962a7503ef9aa52874e4b75e638b63705e"
},
{
"last_affected": "971feacb437fc5a8033e99c68002d7452a467a32"
},
{
"introduced": "27750ab12343e6b5d6ed1e277b161aa45bc02cfd"
},
{
"last_affected": "27750ab12343e6b5d6ed1e277b161aa45bc02cfd"
}
],
"database_specific": {
"extracted_events": [
{
"cpe": "cpe:2.3:a:kubernetes:external-provisioner:*:*:*:*:*:*:*:*",
"range": [
{
"introduced": "0.4.1"
},
{
"last_affected": "0.4.2"
}
],
"source": "CPE_RANGE"
},
{
"cpe": "cpe:2.3:a:kubernetes:external-provisioner:*:*:*:*:*:*:*:*",
"range": [
{
"introduced": "1.0.0"
},
{
"last_affected": "1.0.1"
}
],
"source": "CPE_RANGE"
},
{
"cpe": "cpe:2.3:a:kubernetes:external-provisioner:*:*:*:*:*:*:*:*",
"range": [
{
"introduced": "1.1.0"
},
{
"last_affected": "1.2.1"
}
],
"source": "CPE_RANGE"
},
{
"cpe": "cpe:2.3:a:kubernetes:external-provisioner:1.3.0:*:*:*:*:*:*:*",
"range": [
{
"introduced": "1.3.0"
},
{
"last_affected": "1.3.0"
}
],
"source": "CPE_STRING"
}
]
}
}
],
"versions": [
"1.3.0",
"v1.2.1",
"v1.3.0",
"v1.2.0-rc1",
"v1.2.0",
"v1.1.0",
"v1.0.1-rc1",
"v1.0.1",
"v0.4.2",
"v0.4.1",
"v1.0.0"
],
"database_specific": {
"source": "https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2019-11255.json"
}
},
{
"ranges": [
{
"repo": "https://github.com/kubernetes-csi/external-resizer",
"type": "GIT",
"events": [
{
"introduced": "61904896301627bba78a7ef3f37804a83df9e9e4"
},
{
"last_affected": "07a4fd906acbb8014c0f5d05578071c0a9559251"
}
],
"database_specific": {
"extracted_events": [
{
"cpe": "cpe:2.3:a:kubernetes:external-resizer:*:*:*:*:*:*:*:*",
"range": [
{
"introduced": "0.1.0"
},
{
"last_affected": "0.2.0"
}
],
"source": "CPE_RANGE"
}
]
}
}
],
"versions": [
"v0.2.0",
"v0.1.0"
],
"database_specific": {
"source": "https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2019-11255.json"
}
},
{
"ranges": [
{
"repo": "https://github.com/kubernetes-csi/external-snapshotter",
"type": "GIT",
"events": [
{
"introduced": "590aeed7566eaa0409ae852000e570aa0a5c2720"
},
{
"last_affected": "5bad0876534419b708ca88cecdfae0c1c39a1e1e"
},
{
"introduced": "0"
},
{
"last_affected": "0d2cdd7bde5ea9d41ae47ef4184ca20ebe0435e1"
},
{
"introduced": "ac33959738598e55a0a0a9d5a2d08d7445f27f36"
},
{
"last_affected": "34fa9aad47eef93ca8281c2a029f031852cfefa5"
}
],
"database_specific": {
"extracted_events": [
{
"cpe": "cpe:2.3:a:kubernetes:external-snapshotter:*:*:*:*:*:*:*:*",
"range": [
{
"introduced": "0.4.0"
},
{
"last_affected": "0.4.1"
}
],
"source": "CPE_RANGE"
},
{
"cpe": "cpe:2.3:a:kubernetes:external-snapshotter:*:*:*:*:*:*:*:*",
"range": [
{
"introduced": "1.0.0"
},
{
"last_affected": "1.0.1"
}
],
"source": "CPE_RANGE"
},
{
"cpe": "cpe:2.3:a:kubernetes:external-snapshotter:*:*:*:*:*:*:*:*",
"range": [
{
"introduced": "1.1.0"
},
{
"last_affected": "1.2.1"
}
],
"source": "CPE_RANGE"
}
]
}
}
],
"versions": [
"v0.4.1",
"v1.2.1",
"v1.2.0",
"v1.1.0",
"v1.0.1-rc1",
"v1.0.1",
"v1.0.0-rc4",
"v1.0.0-rc3",
"v1.0.0-rc2",
"v0.4.0-rc.1",
"v0.4.0",
"v0.5.0-alpha.0"
],
"database_specific": {
"source": "https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2019-11255.json"
}
}
],
"modified": "2026-10-24T10:47:42.148189626Z",
"provider": "osv",
"references": [
"https://groups.google.com/forum/#%21topic/kubernetes-security-announce/aXiYN0q4uIw",
"https://access.redhat.com/errata/RHSA-2019:4054",
"https://access.redhat.com/errata/RHSA-2019:4096",
"https://access.redhat.com/errata/RHSA-2019:4099",
"https://access.redhat.com/errata/RHSA-2019:4225",
"https://security.netapp.com/advisory/ntap-20200810-0003/",
"https://github.com/kubernetes/kubernetes/issues/85233"
],
"provider_metadata": {
"unresolved_ranges": [
{
"cpes": [
"cpe:2.3:a:redhat:openshift_container_platform:3.11:*:*:*:*:*:*:*",
"cpe:2.3:a:redhat:openshift_container_platform:4.1:*:*:*:*:*:*:*",
"cpe:2.3:a:redhat:openshift_container_platform:4.2:*:*:*:*:*:*:*"
],
"vendor_product": "redhat:openshift_container_platform",
"extracted_events": [
{
"range": [
{
"introduced": "3.11"
},
{
"last_affected": "3.11"
},
{
"introduced": "4.1"
},
{
"last_affected": "4.1"
},
{
"introduced": "4.2"
},
{
"last_affected": "4.2"
}
],
"source": "CPE_STRING"
}
]
}
]
}
},
"related_cves": [
{
"value": "CVE-2019-11255",
"evidence": "/id"
}
],
"security_relevant": true,
"severity_evidence": "/severity/0/score"
},
"source_id": "core-osv",
"document_id": 441475,
"published_at": "2019-12-05T16:15:10.567+00:00"
}