Skip to content

Product

openshift github.com/openshift/console vulnerabilities

4 published CVES affecting openshift github.com/openshift/console, from public sources (CVE.org, NVD, CISA KEV, FIRST EPSS, OSV).

Total
4
Critical
0
High
0
Medium
3
Low
0
Unscored
1
CISA KEV
0

Latest openshift github.com/openshift/console CVEs

Newest publication first

  1. CVE-2024-7631 OpenShift Console Has a Path Traversal Vulnerability

    Published
    MediumCVSS 4.3

    A flaw was found in the OpenShift Console, an endpoint for plugins to serve resources in multiple languages: /locales/resources.json. This endpoint's lng and ns parameters are used to construct a filepath in pkg/plugins/handlers unsafely.go#L112 Because of this unsafe filepath co...

  2. CVE-2024-6538 OpenShift Console Server Side Request Forgery vulnerability

    Published
    MediumCVSS 6.9

    A flaw was found in OpenShift Console. A Server Side Request Forgery (SSRF) attack can happen if an attacker supplies all or part of a URL to the server to query. The server is considered to be in a privileged network position and can often reach exposed services that aren't read...

  4. CVE-2024-6508 Openshift Console insufficient entropy vulnerability

    MediumCVSS 5.5

    An insufficient entropy vulnerability was found in the Openshift Console. In the authorization code type and implicit grant type, the OAuth2 protocol is vulnerable to a Cross-Site Request Forgery (CSRF) attack if the state parameter is used inefficiently. This flaw allows logging...

Sources: CVE.org, NVD, CISA KEV, FIRST EPSS, OSV and public exploit-reference metadata. Product matching comes from the published CVE records. A proof-of-concept means public code exists; it is not evidence of exploitation.