Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

github логотип

GHSA-5m75-xc7x-rg6m

Опубликовано: 24 мая 2022
Источник: github
Github: Не прошло ревью
CVSS3: 6.1

Описание

A flaw was found in the OpenShift web console, where the access token is stored in the browser's local storage. An attacker can use this flaw to get the access token via physical access, or an XSS attack on the victim's browser. This flaw affects openshift/console versions before openshift/console-4.

A flaw was found in the OpenShift web console, where the access token is stored in the browser's local storage. An attacker can use this flaw to get the access token via physical access, or an XSS attack on the victim's browser. This flaw affects openshift/console versions before openshift/console-4.

EPSS

Процентиль: 37%
0.00157
Низкий

6.1 Medium

CVSS3

Дефекты

CWE-358

Связанные уязвимости

CVSS3: 6.3
redhat
почти 6 лет назад

A flaw was found in the OpenShift web console, where the access token is stored in the browser's local storage. An attacker can use this flaw to get the access token via physical access, or an XSS attack on the victim's browser. This flaw affects openshift/console versions before openshift/console-4.

CVSS3: 6.1
nvd
больше 4 лет назад

A flaw was found in the OpenShift web console, where the access token is stored in the browser's local storage. An attacker can use this flaw to get the access token via physical access, or an XSS attack on the victim's browser. This flaw affects openshift/console versions before openshift/console-4.

EPSS

Процентиль: 37%
0.00157
Низкий

6.1 Medium

CVSS3

Дефекты

CWE-358