CVE-2025-11355

creationtimestamp| type| source ---|---|--- 2025-10-07 13:48:22+00:00| seen| https://infosec.exchange/users/cR0w/statuses/115333195472561898 2026-01-08 17:13:19+00:00| published-proof-of-concept| Telegram/4pwzrJnceRLyEgpbd6VO8VdJVifSdOcVQ4b7TmcAbl02Blg...

Cross-Site Request Forgery (CSRF)

github.com/openshift/console is vulnerable to cross-site request forgery CSRF on proxied requests. The server did not perform verification for anti-CSRF tokens and source Origin header of requests. This would allow an attacker to submit requests on behalf of authenticated users via a specially...