Lucene search

K
osvGoogleOSV:CVE-2020-27816
HistoryDec 02, 2020 - 1:15 a.m.

CVE-2020-27816

2020-12-0201:15:12
Google
osv.dev
5

6.9 Medium

AI Score

Confidence

High

0.001 Low

EPSS

Percentile

34.0%

The elasticsearch-operator does not validate the namespace where kibana logging resource is created and due to that it is possible to replace the original openshift-logging console link (kibana console) to different one, created based on the new CR for the new kibana resource. This could lead to an arbitrary URL redirection or the openshift-logging console link damage. This flaw affects elasticsearch-operator-container versions before 4.7.

6.9 Medium

AI Score

Confidence

High

0.001 Low

EPSS

Percentile

34.0%

Related for OSV:CVE-2020-27816