Skip to content
OpenAdvisories
Critical 1 exploited CVE RHSA-2022:1291 1 CVE

Red Hat Security Advisory: Release of OpenShift Serverless Client kn 1.21.1

Published Sep 16, 2024 · Updated Mar 18, 2026

Ecosystem: Red Hat

Fixed packages 1

ReleasePackageFixed in
Red Hat · Serverless 1 serverless:1.0::el8 openshift-serverless-clients 0:1.0.1-2.el8

Vulnerabilities 1

  • Critical 9.8
    CVE-2022-22963 Exploited Public exploit Scanner template EPSS 100%

    Spring Cloud Function Code Injection with a specially crafted SpEL as a routing expression

    In Spring Cloud Function versions 3.1.6, 3.2.2 and older unsupported versions, when using routing functionality it is possible for a user to provide a specially crafted SpEL as a routing-expression that may result in remote code execution and access to local …

    org.springframework.cloud:spring-cloud-function-context Maven
    KEV Aug 25, 2022

References

  • article
    https://access.redhat.com/security/updates/classification/#low
  • article
    https://access.redhat.com/security/vulnerabilities/RHSB-2022-003
  • article
    https://access.redhat.com/documentation/en-us/openshift_container_platform/4.6/html/serverless/index
  • article
    https://access.redhat.com/documentation/en-us/openshift_container_platform/4.7/html/serverless/index
  • article
    https://access.redhat.com/documentation/en-us/openshift_container_platform/4.8/html/serverless/index
  • article
    https://access.redhat.com/documentation/en-us/openshift_container_platform/4.9/html/serverless/index
  • article
    https://access.redhat.com/documentation/en-us/openshift_container_platform/4.10/html/serverless/index
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=2070668
  • advisory
    https://security.access.redhat.com/data/csaf/v2/advisories/2022/rhsa-2022_1291.json
  • report
    https://access.redhat.com/security/cve/CVE-2022-22963
  • advisory
    https://www.cve.org/CVERecord?id=CVE-2022-22963
  • advisory
    https://nvd.nist.gov/vuln/detail/CVE-2022-22963
  • article
    https://tanzu.vmware.com/security/cve-2022-22963
  • article
    https://www.cisa.gov/known-exploited-vulnerabilities-catalog