CVE-2025-5198 | Teknoloji dünyasından en güncel haberleri ve güvenlikle ilgili gelişmeleri takip edin.

A flaw was found in Stackrox, where it is vulnerable to Cross-site scripting (XSS) if the script code is included in a small subset of table cells. The only kno…
Medium CVSS: 5.0

CVE-2025-5198

A flaw was found in Stackrox, where it is vulnerable to Cross-site scripting (XSS) if the script code is included in a small subset of table cells. The only known potential exploit is if the script is included in the name of a Kubernetes “Role” object* that is applied to a secured cluster. This object can be used by a user with access to the cluster or through a compromised third-party product.
Vendor
Redhat
Product
Advanced Cluster Security
CWE
CWE-79
Yayın Tarihi
2025-05-27 21:15:22
Güncelleme
2025-07-30 20:15:38
Source Identifier
secalert@redhat.com
KEV Date Added
-

Kategoriler

Referanslar