Summary
Ein entfernter, authentisierter Angreifer kann mehrere Schwachstellen in Red Hat OpenShift ausnutzen, um Dateien zu manipulieren und einen Cross-Site-Scripting-Angriff durchzuführen.
Product
Red Hat OpenShift ist eine "Platform as a Service" (PaaS) Lösung zur Bereitstellung von Applikationen in der Cloud.
Vulnerabilities 2
-
High 7.1
Envoyproxy: openshift service mesh envoy http header sanitization bypass leading to dos and unauthorized access
A flaw was found in OpenShift Service Mesh 2.6.3 and 2.5.6. Rate-limiter avoidance, access-control bypass, CPU and memory exhaustion, and replay attacks may be possible due to improper HTTP header sanitization in Envoy.
-
Medium 4.3
Envoyproxy: openshift service mesh 2.6.3 and 2.5.6 envoy header handling allows log injection and potential spoofing
The vulnerability was found in OpenShift Service Mesh 2.6.3 and 2.5.6. This issue occurs due to improper sanitization of HTTP headers by Envoy, particularly the x-forwarded-for header. This lack of sanitization can allow attackers to inject malicious payloads…
Revision history
-
#1
Initiale Fassung
References
-
RedHat Customer Portal vom 2025-01-28
https://access.redhat.com/security/cve/CVE-2025-0754
-
GitHub Advisory Database vom 2025-01-28
https://github.com/advisories/GHSA-jwh7-xm52-qvh7
-
RedHat Customer Portal vom 2025-01-28
https://access.redhat.com/security/cve/CVE-2025-0752
-
GitHub Advisory Database vom 2025-01-28
https://github.com/advisories/GHSA-wpxv-x75w-vp46