github.com/openshift/console

4 known vulnerabilities.

All Critical High Medium Low Exploited only Public exploit

1 result · Clear filters · Feed

High 8.0

CVE-2024-6508

Openshift-console: oauth2 insufficient state parameter entropy

An insufficient entropy vulnerability was found in the Openshift Console. In the authorization code type and implicit grant type, the OAuth2 protocol is vulnerable to a Cross-Site Request Forgery (CSRF) attack if the state parameter is used inefficiently. Thi…

Red Hat Red Hat OpenShift Container Platform 4.18 Red Hat OpenShift Container Platform 4.16 Red Hat OpenShift Container Platform 4.14 Go

Aug 21, 2024