Vulnerabilities in OpenSift

6 results

Vexday analysis

OpenShift apresenta 6 vulnerabilidades registradas sem exploração ativa conhecida ou críticas confirmadas. A fraqueza dominante é CWE-918 (Server-Side Request Forgery), indicando risco potencial em funcionalidades de rede. O panorama é estável com nenhuma publicação recente, reduzindo a urgência imediata de ação.

CVE-2026-28676HIGHOpenSift: Insufficient path containment checks in storage helpers could allow path traversal-style file operationsEPSS 0.4%CVE-2026-27169HIGHOpenSift: Persistent XSS Chat Tool RenderingEPSS 0.4%CVE-2026-28677HIGHOpenSift: Insufficient URL destination restrictions in ingest flow could enable SSRF-style internal accessEPSS 0.3%CVE-2026-28675MEDIUMOpenSift: Sensitive implementation details exposed via raw exception messages and token-returning endpointsEPSS 0.3%CVE-2026-27170HIGHOpenSift: SSRF risk in URL ingestion endpointEPSS 0.2%CVE-2026-27189MEDIUMOpenSift: Race-prone local persistence could cause state corruption/lossEPSS 0.1%