CVE-2018-10937

    Dashboard / Vulnerabilities / CVE-2018-10937

    CVE-2018-10937

    Published: 11 Sept 2018Last Modified: 8 Jul 2026

    Summary:

    Details: A cross site scripting flaw exists in the tetonic-console component of Openshift Container Platform 3.11. An attacker with the ability to create pods can use this flaw to perform actions on the K8s API as the victim.

    References: http://www.securityfocus.com/bid/105190, https://github.com/openshift/console/pull/461, https://bugzilla.redhat.com/show_bug.cgi?id=CVE-2018-10937, https://github.com/openshift/console/commit/d56666852da6e7309a2e63a49f49a72ff66d309c

    Affected packages

    Package

    Name:

    Purl:

    Affected ranges

    Type: GIT

    Events:

    Introduced- d822672dec05b2aec2f421295b3f87e9d42493c4
    Fixed -None

    Affected versions

    3.11

    Common Vulnerability Scoring System

    Attack Vector
    Network
    Adjacent
    Local
    Physical
    Privileges Required
    None
    Low
    High
    User Interaction
    None
    Required
    Scope
    Unchanged
    Changed
    Confidentiality
    None
    Low
    High
    Integrity
    None
    Low
    High
    Availability
    None
    Low
    High