Red Hat Security Advisory

RHSA-2022:1292

Release of OpenShift Serverless 1.21.1

Released 2022-04-11 · Red Hat rating Low · View on Red Hat →

Fixed in

Red Hat OpenShift Serverless 1.21 openshift-serverless-1/client-kn-rhel8, openshift-serverless-1/kn-cli-artifacts-rhel8

Fixes 1 record

TI-2022-07140 CVE-2022-22963 · GHSA-6v73-fgf6-w5j7

Code injection in Spring Cloud Function

CRITICAL 100KEV

In Spring Cloud Function versions 3.1.6, 3.2.2 and older unsupported versions, when using routing functionality it is possible for a user to provide a specially crafted SpEL as a routing-expression that may result in rem…

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.99938 Published 2022-04-01 Fixed in 3.2.3, 3.1.7 CWE-94