{"id":"CVE-2023-2727","url":"https://www.cyber-defence.io/tools/cve/CVE-2023-2727","generatedAt":"2026-10-25T15:14:34.049Z","title":"Users may be able to launch containers using images that are restricted by ImagePolicyWebhook when using ephemeral containers.","description":"Users may be able to launch containers using images that are restricted by ImagePolicyWebhook when using ephemeral containers. Kubernetes clusters are only affected if the ImagePolicyWebhook admission plugin is used together with ephemeral containers.","published":"2023-07-03T21:15:09.000Z","lastModified":"2026-06-17T05:53:18.000Z","status":"Modified","sourceIdentifier":"jordan@liggitt.net","cvss":{"version":"3.1","score":6.5,"severity":"MEDIUM","vector":"CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:N"},"cwe":["CWE-20"],"affected":["kubernetes/kubernetes"],"epss":{"score":0.01134,"percentile":0.66274,"date":"2026-10-24","history":[]},"kev":{"listed":false},"exploits":{"count":0,"verified":false,"firstPublished":null,"source":"Exploit-DB (https://gitlab.com/exploit-database/exploitdb)","entries":[]},"verdict":{"level":"low","text":"Lower severity and a low EPSS score (1.13%). Track it; it rarely justifies an emergency change on its own."},"changes":[],"references":[{"url":"http://www.openwall.com/lists/oss-security/2023/07/06/2","tags":["Mailing List","Third Party Advisory"],"source":"jordan@liggitt.net"},{"url":"https://github.com/kubernetes/kubernetes/issues/118640","tags":["Issue Tracking"],"source":"jordan@liggitt.net"},{"url":"https://groups.google.com/g/kubernetes-security-announce/c/vPWYJ_L84m8","tags":["Mailing List"],"source":"jordan@liggitt.net"},{"url":"https://security.netapp.com/advisory/ntap-20230803-0004/","source":"jordan@liggitt.net"},{"url":"http://www.openwall.com/lists/oss-security/2023/07/06/2","tags":["Mailing List","Third Party Advisory"],"source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://github.com/kubernetes/kubernetes/issues/118640","tags":["Issue Tracking"],"source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://groups.google.com/g/kubernetes-security-announce/c/vPWYJ_L84m8","tags":["Mailing List"],"source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://security.netapp.com/advisory/ntap-20230803-0004/","source":"af854a3a-2127-422b-91ae-364da2661108"}],"sources":{"nvd":"https://nvd.nist.gov/vuln/detail/CVE-2023-2727","epss":"https://www.first.org/epss/","kev":"https://www.cisa.gov/known-exploited-vulnerabilities-catalog","exploitdb":"https://www.exploit-db.com/"},"licence":"CC BY 4.0 — link back to the CVE Explorer if you publish the results; upstream data remains subject to its own terms."}