Lucene search
+L

2 matches found

Cvelist
Cvelist
•added 2026/10/15 6:44 p.m.•23 views

CVE-2026-108334 Github.com/kuadrant/kuadrant-operator/internal/wasm: github.com/rh-api-management/rhcl-operator-product-build/kuadrant-operator: kuadrant-operator: crafted httproute match values can bypass gateway policy overrides

A flaw was found in the internal WebAssembly WASM shim used by the Kuadrant operator. When generating the CEL predicate that determines whether Gateway-level authentication and rate limiting should run, the shim does not correctly escape values from HTTPRoute match fields. A user who can create o...

7.4CVSS
SaveExploits0References2
EUVD
EUVD
•added 2026/10/15 6:44 p.m.•6 views

EUVD-2026-102322

A flaw was found in the internal WebAssembly WASM shim used by the Kuadrant operator. When generating the CEL predicate that determines whether Gateway-level authentication and rate limiting should run, the shim does not correctly escape values from HTTPRoute match fields. A user who can create o...

7.4CVSS5.7AI score
SaveExploits0References2
Rows per page
Query Builder