8.6Alta
OSAC operator: Kubeconfig credential-plugin execution and SSRF in console proxy
osac-project osac-operator
OSAC operator is a Kubernetes operator. In the affected revision identified as 8220502, the `console-proxy` `RemoteConfigResolver` parses Kubernetes Secret kubeconfig data with `clientcmd.RESTConfigFromKubeConfig` without sanitizing the resulting `rest.Config…