CVE-2025-5198
A flaw was found in Stackrox, where it is vulnerable to Cross-site scripting (XSS) if the script code is included in a small subset of table cells. The only known potential exploit is if the script is included in the name of a Kubernetes “Role” object* that is applied to a secured cluster. This object can be used by a user with access to the cluster or through a compromised third-party product.
Vendor
Product
CWE
Yayın Tarihi
2025-05-27 21:15:22
Güncelleme
2025-07-30 20:15:38
Source Identifier
secalert@redhat.com
KEV Date Added
-