by Kastro CVE-2026-75885
Red Hat Red Hat OpenShift Container Platform 4.12 — Openshift/console: openshift/console: unauthenticated ssrf and resource exhaustion via devfile parser endpoint
Description · from the CVE record
A flaw was found in the OpenShift console. Unauthenticated access to the `/api/devfile/` and `/api/devfile/samples/` endpoints allows a remote attacker to send crafted devfile payloads. This can lead to Server-Side Request Forgery (SSRF), where the console pod makes requests to internal services and reflects partial responses to the attacker. Additionally, by sending repeated large requests without a specified content length, an attacker can cause unbounded memory growth, leading to a Denial of Service (DoS).
Affected
ProductAffectedFixed inSource
Red Hat OpenShift Container Platform 4.12see advisory1790102793CNA
Red Hat OpenShift Container Platform 4.13see advisory1791299243CNA
Red Hat OpenShift Container Platform 4.14see advisory1790606051CNA
Red Hat OpenShift Container Platform 4.15see advisory1791836468CNA
Red Hat OpenShift Container Platform 4.16see advisory1790636171CNA
Red Hat OpenShift Container Platform 4.17see advisory1789939565CNA
Red Hat OpenShift Container Platform 4.18see advisory1789904865CNA
Red Hat OpenShift Container Platform 4.19see advisory1790095950CNA
Red Hat OpenShift Container Platform 4.20see advisory1790112153CNA
Red Hat OpenShift Container Platform 4.21see advisory1790142788CNA
Red Hat OpenShift Container Platform 4.22see advisory1790130905CNA
Scores by source
redhat (CNA)9.3CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:N/A:L
CISA ADPSSVCExploitation: none · Automatable: yes · Technical impact: partial