Fedora: Security Advisory for golang-k8s-kube-aggregator (FEDORA-2022-3a63897745)

The remote host is missing an update for the Copyright C 2022 Greenbone Networks GmbH Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-or-later This program is free software; you can...

GHSA-VPMW-77VM-4MJG Cross-site Scripting in Cipi

Cipi 3.1.15 allows Add Server stored cross-site scripting via the /api/servers name field...

CVE-2022-26332: Improper Neutralization of Input During Web Page Generation

Cipi 3.1.15 allows Add Server stored XSS via the /api/servers name field...

PT-2022-17792

Name of the Vulnerable Software and Affected Versions Cipi version 3.1.15 Description The issue allows for stored cross-site scripting XSS via the /api/servers API endpoint, specifically through the name field. This enables an attacker to inject malicious scripts into the server, potentially...

proxy request handling in kube-apiserver can leave vulnerable TCP connections

CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H 9.8, critical With a specially crafted request, users that are authorized to establish a connection through the Kubernetes API server to a backend server can then send arbitrary requests over the same connection directly to that backend, authenticated...

[SECURITY] Fedora 20 Update: openstack-glance-2013.2-1.fc20

OpenStack Image Service code-named Glance provides discovery, registratio n, and delivery services for virtual disk images. The Image Service API server provides a standard REST interface for querying information about virtual d isk images stored in a variety of back-end stores, including OpenSta...

USN-1715-1: OpenStack Keystone vulnerability

Dan Prince discovered that Keystone did not properly perform input validation when handling certain error conditions. An unauthenticated user could exploit this to cause a denial of service in Keystone API servers via disk space exhaustion...