Medium · 4.6 CVE-2018-10937 EUVD-2018-2989GHSA-7874-f8pp-9q35

A cross site scripting flaw exists in the tetonic-console component of Openshift Container Platform 3.11. An attacker with the ability to c…

Published Sep 11, 2018 · Updated Aug 5, 2024 · Assigned by redhat

Vendor: Red Hat Product: Openshift Container Platform

Description

A cross site scripting flaw exists in the tetonic-console component of Openshift Container Platform 3.11. An attacker with the ability to create pods can use this flaw to perform actions on the K8s API as the victim.

Affected products

Vendor	Product	Affected	Fixed
Red Hat	Openshift Container Platform	3.11	—

References

https://bugzilla.redhat.com/show_bug.cgi?id=CVE-2018-10937
105190 vdb-entry
https://github.com/openshift/console/pull/461
https://github.com/openshift/console/commit/d56666852da6e7309a2e63a49f49a72ff66d309c