306 matches found
GHSA-H78M-J95M-5356 Cilium has an information leakage via insecure default Hubble UI CORS header
Impact For users who deploy Hubble UI using either Cilium CLI or via the Cilium Helm chart, an insecure default Access-Control-Allow-Origin header value could lead to sensitive data exposure. A user with access to a Hubble UI instance affected by this issue could leak configuration details about...
GHSA-9M5P-C77C-F9J7 vulnerabilities
Vulnerabilities for packages: hubble-ui, hubble-ui-backend-fips...
GHSA-9M5P-C77C-F9J7 vulnerabilities
Vulnerabilities for packages: hubble-ui...
CVE-2025-23047 Cilium vulnerable to information leakage via insecure default Hubble UI CORS header
Cilium is a networking, observability, and security solution with an eBPF-based dataplane. An insecure default Access-Control-Allow-Origin header value could lead to sensitive data exposure for users of Cilium versions 1.14.0 through 1.14.7, 1.15.0 through 1.15.11, and 1.16.0 through 1.16.4 who...
CVE-2025-23047
Cilium is a networking, observability, and security solution with an eBPF-based dataplane. An insecure default "Access-Control-Allow-Origin" header value could lead to sensitive data exposure for users of Cilium versions 1.14.0 through 1.14.7, 1.15.0 through 1.15.11, and 1.16.0 through 1.16.4 who...
CVE-2025-23047 Cilium vulnerable to information leakage via insecure default Hubble UI CORS header
Cilium is a networking, observability, and security solution with an eBPF-based dataplane. An insecure default Access-Control-Allow-Origin header value could lead to sensitive data exposure for users of Cilium versions 1.14.0 through 1.14.7, 1.15.0 through 1.15.11, and 1.16.0 through 1.16.4 who...
CVE-2025-23047
CVE-2025-23047 affects Cilium with Hubble UI when deployed; insecure default Access-Control-Allow-Origin header can expose cluster configuration. Affected: 1.14.0–1.14.7, 1.15.0–1.15.11, 1.16.0–1.16.4. Exploit requires visiting a malicious page; could reveal Kubernetes cluster details (node names...
CVE-2025-23047 Cilium vulnerable to information leakage via insecure default Hubble UI CORS header
Cilium is a networking, observability, and security solution with an eBPF-based dataplane. An insecure default Access-Control-Allow-Origin header value could lead to sensitive data exposure for users of Cilium versions 1.14.0 through 1.14.7, 1.15.0 through 1.15.11, and 1.16.0 through 1.16.4 who...
CVE-2025-23028 vulnerabilities
Vulnerabilities for packages: hubble-ui, hubble-ui-backend-fips...
CVE-2025-23028 vulnerabilities
Vulnerabilities for packages: hubble-ui...
CVE-2025-23047: Exposure of Sensitive Information to an Unauthorized Actor
Cilium is a networking, observability, and security solution with an eBPF-based dataplane. An insecure default Access-Control-Allow-Origin header value could lead to sensitive data exposure for users of Cilium versions 1.14.0 through 1.14.7, 1.15.0 through 1.15.11, and 1.16.0 through 1.16.4 who...
PT-2025-4791
Name of the Vulnerable Software and Affected Versions Cilium versions 1.14.0 through 1.14.7 Cilium versions 1.15.0 through 1.15.11 Cilium versions 1.16.0 through 1.16.4 Description Cilium is a networking, observability, and security solution with an eBPF-based dataplane. An insecure default...
GHSA-XG58-75QF-9R67 vulnerabilities
Vulnerabilities for packages: cilium, cilium-fips, hubble-fips, hubble...
GHSA-XG58-75QF-9R67 vulnerabilities
Vulnerabilities for packages: hubble...
CVE-2024-52529 vulnerabilities
Vulnerabilities for packages: cilium, cilium-fips, hubble-fips, hubble...
CVE-2024-52529 vulnerabilities
Vulnerabilities for packages: hubble...
CVE-2024-47825 vulnerabilities
Vulnerabilities for packages: hubble-ui, hubble-ui-backend-fips...
CVE-2024-47825 vulnerabilities
Vulnerabilities for packages: hubble-ui...