GO-2025-3416

vendorUSosv

Cilium has an information leakage via insecure default Hubble UI CORS header in github.com/cilium/cilium

view advisory published 2025-01-28Licence: per source

Cilium has an information leakage via insecure default Hubble UI CORS header in github.com/cilium/cilium

01

describes (1)

Related CVEs.

IDseverity exploitable
CVE-2025-23047US——
Cilium is a networking, observability, and security solution with an eBPF-based dataplane. An insecure default `Access-Control-Allow-Origin` header value could lead to sensitive da…
02

references

External citations — patches, advisories, analysis.

scry

Advisories like this name the exposed products attackers go after on your perimeter. See what is exposed on your perimeter with a free passive scan.

Free scan