Aller au contenu
en Se connecter
7.4 Élevée

CVE-2026-50237 A Server-Side Request Forgery and supply chain flaw was found in the OpenShift Console Helm catalog proxy

Description

A Server-Side Request Forgery and supply chain flaw was found in the OpenShift Console Helm catalog proxy. A namespace tenant can plant a ProjectHelmChartRepository with an arbitrary URL that the console pod fetches server-side, bypassing tenant egress restrictions. Combined with catalog metadata poisoning and admin-mediated chart installation, this enables privilege escalation.

Produits et versions touchés

Produit Versions touchées Corrigé en
Red Hat OpenShift Container Platform 4 Versions non publiées
Red Hat OpenShift Container Platform 4.12 1786511587 premières → < 1786511587 1786511587
Red Hat OpenShift Container Platform 4.13 1786477760 premières → < 1786477760 1786477760
Red Hat OpenShift Container Platform 4.14 1787056403 premières → < 1787056403 1787056403
Red Hat OpenShift Container Platform 4.15 1787028559 premières → < 1787028559 1787028559
Red Hat OpenShift Container Platform 4.16 1787054159 premières → < 1787054159 1787054159
Red Hat OpenShift Container Platform 4.18 1786540776 premières → < 1786540776 1786540776
Red Hat OpenShift Container Platform 4.19 1786486822 premières → < 1786486822 1786486822
Red Hat OpenShift Container Platform 4.20 1786534931 premières → < 1786534931 1786534931
Afficher les 4 autres branches
Produit Versions touchées Corrigé en
Red Hat OpenShift Container Platform 4.21 1786574043 premières → < 1786574043 1786574043
Red Hat OpenShift Container Platform 4.22 1786607915 premières → < 1786607915 1786607915
Red Hat OpenShift Container Platform 4.17 1787631382 premières → < 1787631382 1787631382
Red Hat OpenShift Container Platform 4.2 1786534931 premières → < 1786534931 1786534931

Références

Chronologie

  1. Publiée
  2. Dernière modification

Autres CVE de Red Hat OpenShift Container Platform 4

Les 629 CVE de Red Hat OpenShift Container Platform 4 →
CVE-2026-82976 Image-customization-controller: unauthenticated plaintext image server with directory listing exposes ignition images containing cluster pull secret 7.1 Élevée CVE-2026-120831 Libslirp: libslirp: queue pointer corruption in if_output() leading to denial of service 6.5 Moyenne CVE-2026-120830 Libslirp: libslirp: out-of-bounds heap read in icmp_forward_error() leading to information disclosure 7.4 Élevée CVE-2026-120194 Json-glib: json-glib: infinite loop in json_path_query() with negative jsonpath slice step 7.5 Élevée
Suivre cette CVE