openshift4/ose-monitoring-plugin-rhel9

Direct Vulnerabilities

Known vulnerabilities in the openshift4/ose-monitoring-plugin-rhel9 package. This does not include vulnerabilities belonging to this package’s dependencies.

Vulnerability	Vulnerable Version
M Use of Multiple Resources with Duplicate Identifier	*
M Improper Handling of Highly Compressed Data (Data Amplification)	*
M Insecure Preserved Inherited Permissions	*
M Improper Validation of Syntactic Correctness of Input	*
M Improper Validation of Syntactic Correctness of Input	*
L Directory Traversal	*
L Cross-site Scripting (XSS)	*
H Reachable Assertion	*
M Uncaught Exception	*
M Improper Validation of Integrity Check Value	*
H Allocation of Resources Without Limits or Throttling	*
M Allocation of Resources Without Limits or Throttling	*
H Origin Validation Error	*
M Allocation of Resources Without Limits or Throttling	*
H Uncaught Exception	*
H Uncaught Exception	*
H Improper Certificate Validation	*
M Unchecked Input for Loop Condition	*
H Information Exposure Through Caching	*
H Insecure Preserved Inherited Permissions	*
L Server-Side Request Forgery (SSRF)	*
M Incomplete Filtering of Special Elements	*
H Allocation of Resources Without Limits or Throttling	*
H Allocation of Resources Without Limits or Throttling	*
H Loop with Unreachable Exit Condition ('Infinite Loop')	*
M Improper Validation of Specified Quantity in Input	*
M Allocation of Resources Without Limits or Throttling	*
H Allocation of Resources Without Limits or Throttling	*
M Improper Handling of Case Sensitivity	*
M Inappropriate Encoding for Output Context	*
H Improper Validation of Unsafe Equivalence in Input	*
M Loop with Unreachable Exit Condition ('Infinite Loop')	*
L HTTP Request Smuggling	*
M Missing Handler	*
H Improper Neutralization	*
H Improper Certificate Validation	*
M Detection of Error Condition Without Action	*
M Improper Handling of Length Parameter Inconsistency	*
L Allocation of Resources Without Limits or Throttling	*
M Information Exposure Through Caching	*
H Origin Validation Error	*
M Improper Handling of Highly Compressed Data (Data Amplification)	*
M Improper Validation of Specified Index, Position, or Offset in Input	*
H NULL Pointer Dereference	*
L HTTP Request Smuggling	*
M Improper Update of Reference Count	*
M Link Following	*
H Improper Neutralization of Equivalent Special Elements	*
M Cross-site Scripting (XSS)	*
H Server-Side Request Forgery (SSRF)	*
H HTTP Request Smuggling	*
H Improper Neutralization	*
M Cross-site Scripting (XSS)	*
M Cross-site Scripting (XSS)	*
M Cross-site Scripting (XSS)	*
M Cross-site Scripting (XSS)	*
M Cross-site Scripting (XSS)	*
M Cross-site Scripting (XSS)	*
M Cross-site Scripting (XSS)	*
M Improperly Controlled Modification of Dynamically-Determined Object Attributes	*
M Improperly Controlled Modification of Dynamically-Determined Object Attributes	*
M Cross-site Scripting (XSS)	*
H Inefficient Regular Expression Complexity	*
M NULL Pointer Dereference	*
M Misinterpretation of Input	*
M Expression Language Injection	*
H Improper Validation of Unsafe Equivalence in Input	*
L Improperly Controlled Modification of Dynamically-Determined Object Attributes	*
M Allocation of Resources Without Limits or Throttling	*
M Open Redirect	*
M Cross-site Scripting (XSS)	*
M Deserialization of Untrusted Data	*
M Open Redirect	*
M Open Redirect	*
M Cross-site Scripting (XSS)	*
M Inefficient Regular Expression Complexity	*
H Cross-site Scripting (XSS)	*
M Cross-site Scripting (XSS)	*
M Cross-site Scripting (XSS)	*
H Unchecked Input for Loop Condition	*
H CRLF Injection	*
H Incorrect Behavior Order: Authorization Before Parsing and Canonicalization	*
M Inefficient Regular Expression Complexity	*
L Improper Neutralization of Equivalent Special Elements	*
L Cross-site Request Forgery (CSRF)	*
M Cross-site Scripting (XSS)	*
M Open Redirect	*
H Access of Uninitialized Pointer	*
M Cross-site Scripting (XSS)	*
M Improper Validation of Syntactic Correctness of Input	*
M CRLF Injection	*
H Improper Certificate Validation	*
L Improper Verification of Source of a Communication Channel	*
H Allocation of Resources Without Limits or Throttling	*
L Improper Validation of Syntactic Correctness of Input	*
M Allocation of Resources Without Limits or Throttling	*
H Authentication Bypass	*
H Inefficient Regular Expression Complexity	*
M Improperly Controlled Modification of Dynamically-Determined Object Attributes	*
L Origin Validation Error	*
H Allocation of Resources Without Limits or Throttling	*
H Information Exposure	*
H Information Exposure	*
H Improperly Controlled Modification of Dynamically-Determined Object Attributes	*
H Improperly Controlled Modification of Dynamically-Determined Object Attributes	*
M Cross-site Scripting (XSS)	*
H Improper Neutralization	*
H Improperly Controlled Modification of Dynamically-Determined Object Attributes	*
H Improperly Controlled Modification of Dynamically-Determined Object Attributes	*
H Server-Side Request Forgery (SSRF)	*
M Allocation of Resources Without Limits or Throttling	*
M Allocation of Resources Without Limits or Throttling	*
H Allocation of Resources Without Limits or Throttling	*
H Improperly Controlled Modification of Dynamically-Determined Object Attributes	*
M Insufficient Granularity of Access Control	*
M Comparison Using Wrong Factors	*
M CRLF Injection	*
M Improper Validation of Unsafe Equivalence in Input	*
M Improperly Controlled Modification of Dynamically-Determined Object Attributes	*
H Improper Cross-boundary Removal of Sensitive Data	*
M Improperly Controlled Modification of Dynamically-Determined Object Attributes	*
H Improperly Controlled Modification of Dynamically-Determined Object Attributes	*
M Inefficient Regular Expression Complexity	*
M Unchecked Input for Loop Condition	*
M Inefficient Regular Expression Complexity	*
M Inefficient Regular Expression Complexity	*
M Executable Regular Expression Error	*
H Improperly Controlled Modification of Dynamically-Determined Object Attributes	*
H Improper Input Validation	*
M Cross-site Scripting (XSS)	*
M Inefficient Regular Expression Complexity	*
L Server-Side Request Forgery (SSRF)	*
M Improper Handling of Highly Compressed Data (Data Amplification)	*
L Server-Side Request Forgery (SSRF)	*
H Inefficient Regular Expression Complexity	*
H Improper Validation of Specified Type of Input	*
M Cross-site Scripting (XSS)	*
H Improperly Controlled Modification of Object Prototype Attributes ('Prototype Pollution')	*
M Open Redirect	*
H Allocation of Resources Without Limits or Throttling	*
M Improperly Controlled Modification of Object Prototype Attributes ('Prototype Pollution')	*
H Incorrect Behavior Order: Early Validation	*
M Integer Overflow or Wraparound	*
M Uncontrolled Recursion	*
M Resource Exhaustion	*
M Improper Validation of Syntactic Correctness of Input	*

openshift4/ose-monitoring-plugin-rhel9

Direct Vulnerabilities

Fix vulnerabilities automatically