openshift devspaces 3.24 Schwachstellen (CVE)

Für openshift devspaces 3.24 veröffentlichte CVE-Einträge, neueste zuerst. Folgen Sie, um bei neuen Einträgen eine E-Mail zu erhalten.

2 Ergebnisse

9.0Kritisch

CVE-2025-12548 vor 9 Monaten

Github.com/che-incubator/che-code: eclipse che — unauthenticated rce and secret exfiltration via tcp/3333

Red Hat Red Hat OpenShift Dev Spaces (RHOSDS) 3.22; Red Hat Red Hat OpenShift Dev Spaces (RHOSDS) 3.23; Red Hat Red Hat OpenShift Dev Spaces (RHOSDS) 3.24

A flaw was found in Eclipse Che che-machine-exec. This vulnerability allows unauthenticated remote arbitrary command execution and secret exfiltration (SSH keys, tokens, etc.) from other users' Developer Workspace containers, via an unauthenticated JSON-RPC /…

1.3%EPSS

8.1Hoch

CVE-2025-9566 vor 1 Jahr

Podman: podman kube play command may overwrite host files

podman; Red Hat Red Hat Enterprise Linux 10; Red Hat Red Hat Enterprise Linux 8; Red Hat Red Hat Enterprise Linux 8.6 Advanced Mission Critical Update Support

There's a vulnerability in podman where an attacker may use the kube play command to overwrite host files when the kube file container a Secrete or a ConfigMap volume mount and such volume contains a symbolic link to a host file path. In a successful attack, …

1.2%EPSS