medium4.3
CVE-2022-4145
A content spoofing flaw was found in OpenShift's OAuth endpoint.
Impact
A content spoofing flaw was found in OpenShift's OAuth endpoint. This flaw allows a remote, unauthenticated attacker to inject text into a webpage, enabling the obfuscation of a phishing operation.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Redhat | Openshift Container Platform | Version 4.0 |