Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

redhat логотип

CVE-2026-1784

Опубликовано: 02 июн. 2026
Источник: redhat
CVSS3: 8.8
EPSS Низкий

Описание

The Route OpenShift resource allows to define routes to make pods reachable at a subdomain through HAProxy. It was found that the checks performed on the spec.path YAML stanza in a Route document was insufficient and could allow a controlled injection of the HAProxy configuration.

Дополнительная информация

Статус:

Important
Дефект:
CWE-15
https://bugzilla.redhat.com/show_bug.cgi?id=2436075ose-cluster-ingress-operator: Remote Code Execution Through HAProxy Configuration Injection

EPSS

Процентиль: 9%
0.00194
Низкий

8.8 High

CVSS3

Связанные уязвимости

CVSS3: 8.8
nvd
3 месяца назад

The Route OpenShift resource allows to define routes to make pods reachable at a subdomain through HAProxy. It was found that the checks performed on the spec.path YAML stanza in a Route document was insufficient and could allow a controlled injection of the HAProxy configuration.

CVSS3: 8.8
github
3 месяца назад

The Route OpenShift resource allows to define routes to make pods reachable at a subdomain through HAProxy. It was found that the checks performed on the spec.path YAML stanza in a Route document was insufficient and could allow a controlled injection of the HAProxy configuration.

EPSS

Процентиль: 9%
0.00194
Низкий

8.8 High

CVSS3