CVE-2018-10937

Published
View on NVD ↗
CVSS v3
N/A
CVSS v2
3.5
LOW
Affected
1
PROJECT

Description

A cross site scripting flaw exists in the tetonic-console component of Openshift Container Platform 3.11. An attacker with the ability to create pods can use this flaw to perform actions on the K8s API as the victim.

OpenShift Cluster Console UI
GitHubGitHub
456