CVE-2017-7534CWE-79

OpenShift Enterprise version 3.x is vulnerable to a stored XSS via the log viewer for pods

published April 11, 2018

CVSS
—
EPSS
1%
Percentile
43.4
In the wild
Unconfirmed
What it is

OpenShift Enterprise version 3.x is vulnerable to a stored XSS via the log viewer for pods. The flaw is due to lack of sanitation of user input, specifically terminal escape characters, and the creation of clickable links automatically when viewing the log files for a pod.

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.00525 · 43.4th percentile
Weakness
CWE-79 · Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
Published
2018-04-11T19:00Z
EPSS history
Timeline
  • 11 APR 19:00Z
    OpenShift Enterprise version 3.x is vulnerable to a stored XSS via the log viewer for pods
    cvelistv5