Lucene search
+L

3 matches found

Snyk
Snyk
added 2025/12/16 3:30 p.m.4 views

Server-side Request Forgery (SSRF)

Overview Affected versions of this package are vulnerable to Server-side Request Forgery SSRF in the ImageStreamImport mechanism that handles user-supplied image references without proper IP address and network-range validation. An attacker can access internal network resources, enumerate service...

8.5CVSS5.7AI score0.00337EPSS
SaveExploits0References2
Cvelist
Cvelist
added 2025/12/16 12:14 p.m.47 views

CVE-2025-14443 Ose-openshift-apiserver: openshift api server: server-side request forgery (ssrf) vulnerability in imagestreamimport mechanism

A flaw was found in ose-openshift-apiserver. This vulnerability allows internal network enumeration, service discovery, limited information disclosure, and potential denial-of-service DoS through Server-Side Request Forgery SSRF due to missing IP address and network-range validation when processi...

6.4CVSS0.00337EPSS
SaveExploits0References3
Vulnrichment
Vulnrichment
added 2025/12/16 12:14 p.m.6 views

CVE-2025-14443 Ose-openshift-apiserver: openshift api server: server-side request forgery (ssrf) vulnerability in imagestreamimport mechanism

A flaw was found in ose-openshift-apiserver. This vulnerability allows internal network enumeration, service discovery, limited information disclosure, and potential denial-of-service DoS through Server-Side Request Forgery SSRF due to missing IP address and network-range validation when processi...

6.4CVSS6AI score0.00337EPSS
SaveExploits0References3
Rows per page
Query Builder