Skip to content
OpenAdvisories

Package · Go

github.com/openshift/must-gather

1 known vulnerabilities.

All Critical High Medium Low Exploited only Public exploit

1 result · Clear filters · Feed

  • High 8.8
    CVE-2024-25131

    Openshift-dedicated: must-gather-operator: yaml template injection leads to privilege escalation

    A flaw was found in the MustGather.managed.openshift.io Custom Defined Resource (CRD) of OpenShift Dedicated. A non-privileged user on the cluster can create a MustGather object with a specially crafted file and set the most privileged service account to run …

    github.com/openshift/must-gather Go