Skip to content
CVE PROGRAM SOURCE RECORD4.3 Medium

CVE-2022-4145

Content spoofing

Description

A content spoofing flaw was found in OpenShift's OAuth endpoint. This flaw allows a remote, unauthenticated attacker to inject text into a webpage, enabling the obfuscation of a phishing operation.

Affected products

Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.

n/a openshift

Default version status: affected

Red Hat Red Hat OpenShift Container Platform 4

Default version status: affected

References