DeutschShown in its original language — a full translation is planned for a future version.
Red Hat OpenShift Service Mesh: Mehrere Schwachstellen
view advisory published 2025-12-09
Ein entfernter, anonymer Angreifer kann mehrere Schwachstellen in Red Hat OpenShift Service Mesh ausnutzen, um Sicherheitsvorkehrungen zu umgehen, schädlichen Code auszuführen oder einen Denial of Service herbeizuführen.
01
describes (3)
Related CVEs.
| ID | severity | exploitable | ||
|---|---|---|---|---|
| CVE-2025-66031US | high7.5 | — | ||
Forge (also called `node-forge`) is a native implementation of Transport Layer Security in JavaScript. An Uncontrolled Recursion vulnerability in node-forge versions 1.3.1 and belo… | ||||
| CVE-2025-64756US | — | — | ||
Glob matches files using patterns the shell uses. Starting in version 10.2.0 and prior to versions 10.5.0 and 11.1.0, the glob CLI contains a command injection vulnerability in its… | ||||
| CVE-2025-53643US | high7.5 | — | ||
AIOHTTP is an asynchronous HTTP client/server framework for asyncio and Python. Prior to version 3.12.14, the Python parser is vulnerable to a request smuggling vulnerability due t… | ||||
02
references
External citations — patches, advisories, analysis.
- Red Hat Security Advisory RHSA-2025:22936 vom 2025-12-09external
- Red Hat Security Advisory RHSA-2025:22937 vom 2025-12-09external
- Red Hat Security Advisory RHSA-2025:22938 vom 2025-12-09external
- Red Hat Security Advisory RHSA-2025:22939 vom 2025-12-09external
- Red Hat Security Advisory RHSA-2025:22941 vom 2025-12-09external
- Red Hat Security Advisory RHSA-2025:22944 vom 2025-12-09external
- Red Hat Security Advisory RHSA-2026:0261 vom 2026-01-07external
- Red Hat Security Advisory RHSA-2026:0414 vom 2026-01-09external
scry
Advisories like this name the exposed products attackers go after on your perimeter. See what is exposed on your perimeter with a free passive scan.
Free scan