openshift-console vulnerabilities
CVEs whose affected-version data names the openshift-console package. Each record lists the affected and patched versions; check a specific version with the dependency checker or POST /api/sbom.
2 CVEsRSS
CVE-2024-7631Medium· 4.3A flaw was found in the OpenShift Console, an endpoint for plugins to serve resources in multiple languages: /locales/resources.json
A flaw was found in the OpenShift Console, an endpoint for plugins to serve resources in multiple languages: /locales/resources.json. This endpoint's lng and ns parameters are used to construct a filepath in pkg/plugins/handlers unsafely…
▾ SunlitRed Hat · openshift-consoleEPSS 0.52%via NVD
CVE-2024-6538Medium· 5.3A flaw was found in OpenShift Console
A flaw was found in OpenShift Console. A Server Side Request Forgery (SSRF) attack can happen if an attacker supplies all or part of a URL to the server to query. The server is considered to be in a privileged network position and can of…
▾ SunlitRed Hat · openshift-consoleEPSS 0.58%via NVD