Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

github логотип

GHSA-gxvv-45f6-3ch8

Опубликовано: 16 дек. 2025
Источник: github
Github: Прошло ревью
CVSS3: 8.5

Описание

openshift-apiserver: SSRF via Missing IP/Network-Range Validation in User-Supplied Image References

A flaw was found in ose-openshift-apiserver. This vulnerability allows internal network enumeration, service discovery, limited information disclosure, and potential Denial of Service (DoS) through Server-Side Request Forgery (SSRF) due to missing IP address and network-range validation when processing user-supplied image references.

Пакеты

Наименование

github.com/openshift/openshift-apiserver

go
Затронутые версииВерсия исправления

= 4.0.0-alpha.0

Отсутствует

Наименование

github.com/openshift/openshift-apiserver

go
Затронутые версииВерсия исправления

<= 0.0.0-alpha.0.0.20260130163947-0eb84cd66658

Отсутствует

EPSS

Процентиль: 26%
0.00337
Низкий

8.5 High

CVSS3

Дефекты

CWE-918

Связанные уязвимости

CVSS3: 6.4
redhat
9 месяцев назад

A flaw was found in ose-openshift-apiserver. This vulnerability allows internal network enumeration, service discovery, limited information disclosure, and potential denial-of-service (DoS) through Server-Side Request Forgery (SSRF) due to missing IP address and network-range validation when processing user-supplied image references.

CVSS3: 6.4
nvd
9 месяцев назад

A flaw was found in ose-openshift-apiserver. This vulnerability allows internal network enumeration, service discovery, limited information disclosure, and potential denial-of-service (DoS) through Server-Side Request Forgery (SSRF) due to missing IP address and network-range validation when processing user-supplied image references.

EPSS

Процентиль: 26%
0.00337
Низкий

8.5 High

CVSS3

Дефекты

CWE-918