Threats tagged 'ghsa-v3w7-g6p2-mpx7'

A Server Side Request Forgery (SSRF) vulnerability (CVE-2024-6538) exists in OpenShift Console versions up to 6.0.6. Authenticated users can exploit the /api/dev-console/proxy/internet endpoint to make arbitrary HTTP(S) requests from the console pod, including requests to internal cluster services not normally accessible. This could lead to information disclosure or other impacts on internal services. A security update fixing this issue is available in OpenShift Container Platform 4.15.57.