Not rated

CVE-2020-10715 A content spoofing vulnerability was found in the openshift/console 3.11 and 4.x

Description

A content spoofing vulnerability was found in the openshift/console 3.11 and 4.x. This flaw allows an attacker to craft a URL and inject arbitrary text onto the error page that appears to be from the OpenShift instance. This attack could potentially convince a user that the inserted text is legitimate.

Affected products and versions

Product	Affected versions	Fixed in
openshift/console	Versions not published

The 2 CVEs of openshift/console →

CVE-2020-1761 A flaw was found in the OpenShift web console, where the access token is stored in the browser's local storage Not rated

Do you use openshift/console?

Track this CVE Watch openshift/console Check my SBOMs

www.cveye.io/en/cve/CVE-2020-10715

Timeline

Published September 16, 2020
Last modified August 4, 2024

References

github.com github.com
bugzilla.redhat.com bugzilla.redhat.com

Track this CVE

CVE-2020-10715 A content spoofing vulnerability was found in the openshift/console 3.11 and 4.x

Description

Affected products and versions

Other CVEs of openshift/console