Medium severity4.6NVD Advisory· Published Sep 11, 2018· Updated Jun 17, 2026

CVE-2018-10937

Description

A cross site scripting flaw exists in the tetonic-console component of Openshift Container Platform 3.11. An attacker with the ability to create pods can use this flaw to perform actions on the K8s API as the victim.

AI Insight

LLM-synthesized narrative grounded in this CVE's description and references.

Affected products

Red Hat/Openshift Container Platformllm-fuzzy2 versions
3.11+ 1 more
- (no CPE)range: 3.11
- (no CPE)range: 3.11

Patches

Vulnerability mechanics

References

github.com/openshift/console/commit/d56666852da6e7309a2e63a49f49a72ff66d309cnvdExploitThird Party Advisory
www.securityfocus.com/bid/105190nvdThird Party AdvisoryVDB Entry
bugzilla.redhat.com/show_bug.cginvdIssue TrackingThird Party Advisory
github.com/openshift/console/pull/461nvdThird Party Advisory

News mentions

No linked articles in our index yet.

cvss	0.299
epss	0.001
exploit	0.000
kev	0.000
patch	0.000
ransomware	0.000