CVE-2024-7631

creationtimestamp| type| source ---|---|--- 2025-03-19 19:18:17+00:00| seen| https://t.me/DarkWebInformerCVEAlerts/8122 2025-03-19 20:48:50+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3lkr2mydfrj2w 2025-05-06 16:21:41+00:00| seen| https://t.me/DarkWebInformerCVEAlerts/15144...

CVE-2024-7631

A flaw was found in the OpenShift Console, an endpoint for plugins to serve resources in multiple languages: /locales/resources.json. This endpoint's lng and ns parameters are used to construct a filepath in pkg/plugins/handlers unsafely.goL112 Because of this unsafe filepath construction, an...

CVE-2024-7631

OpenShift Console CVE-2024-7631 describes a path traversal flaw in the locales/resources.json endpoint where lng/ns are used to build a file path in pkg/plugins/handlers unsafely.go, allowing an authenticated user to read arbitrary JSON files on the console pod by using ../ sequences. Connected d...

CVE-2024-7631 Openshift-console: openshift console: path traversal

A flaw was found in the OpenShift Console, an endpoint for plugins to serve resources in multiple languages: /locales/resources.json. This endpoint's lng and ns parameters are used to construct a filepath in pkg/plugins/handlers unsafely.goL112 Because of this unsafe filepath construction, an...