Vulnerabilities CVE-2026-50236

CVE-2026-50236

High

Open

TLP:CLEAR

Openshift/console: authenticated ssrf with full response reflection and path neutralization via dev console webhook helpers in openshift console

NVD CVE.org

AI Analysis

No AI analysis yet.

Description

An authenticated SSRF flaw was found in the OpenShift Console Dev Console webhook helpers. User-supplied target URLs are fetched server-side without validation, with path neutralization enabling arbitrary endpoint targeting and full response reflection from the console pod's privileged network position.

Details

CVSS Score: 7.4
CVSS Vector: CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:L/I:L/A:L
Confidence: 90%
Published: Aug 11, 2026
Last Modified: Aug 11, 2026

Notes

No notes yet. Click "Add Note" to create the first analysis note.

Opinions

No opinions yet. Be the first to assess this intelligence.