CVE-2022-3172 PoC — Kubernetes - API server - Aggregated API server can cause clients to be redirected (SSRF)

Source

https://github.com/UgOrange/CVE-2022-3172

Associated Vulnerability

Title:Kubernetes - API server - Aggregated API server can cause clients to be redirected (SSRF) (CVE-2022-3172)
Description:A security issue was discovered in kube-apiserver that allows an aggregated API server to redirect client traffic to any URL. This could lead to the client performing unexpected actions as well as forwarding the client's API server credentials to third parties.

Readme

# CVE-2022-3172 demo
## Run poc.sh create resources
```
chmod +x poc.sh
./poc.sh
```
## Use Curl
```
curl https://kubernetes.default.svc/apis/metrics.k8s.io/v2beta1/ -k -H "Authorization: Bearer {token}"
```

File Snapshot


 [4.0K]  /data/pocs/e51974bc4952a166388ebbe97c8600f9c94cfeb9
├── [ 300]  attack-apiservice.yaml
├── [ 866]  attacker-deployment.yaml
├── [ 187]  attacker-service.yaml
├── [ 365]  poc.sh
└── [ 207]  README.md

0 directories, 5 files

Shenlong Bot has cached this for you

Remarks

1. It is advised to access via the original source first.

2. Local POC snapshots are reserved for subscribers — if the original source is unavailable, the local mirror is part of the paid plan.

View subscription plans →