Vulnerabilidades do Red Hat Red Hat OpenShift Dev Spaces (RHOSDS) 3.24
🔔 Criar alerta RSS Verificador de versão
CVEs publicadas que afetam Red Hat Red Hat OpenShift Dev Spaces (RHOSDS) 3.24: 2 registro(s), com versões afetadas e correções.
CVE-2025-12548
Crítica · 9.0
Exploit público CWE-306 13/01/2026
Github.com/che-incubator/che-code: eclipse che — unauthenticated rce and secret exfiltration via tcp/3333
A flaw was found in Eclipse Che che-machine-exec. This vulnerability allows unauthenticated remote arbitrary command execution and secret exfiltration (SSH keys, tokens, etc.) from other users' Developer Workspace containers, via an unauthenticated JSON-RPC / websocket API exposed on TCP port 3333.
CVE-2025-9566
Alta · 8.1
CWE-22 05/09/2025
Podman: podman kube play command may overwrite host files
There's a vulnerability in podman where an attacker may use the kube play command to overwrite host files when the kube file container a Secrete or a ConfigMap volume mount and such volume contains a symbolic link to a host file path. In a successful attack, the attacker can only control the target file to be overwritten but not the content to be written into the file.
Binary-Affected: podman
Upstream-version-introduced: v4.0.0
Upstream-version-fixed: v5.6.1