Red Hat Security AdvisoryRHSA-2022:7407
Service Binding Operator 1.3.1 security update
Released 2022-11-03 · Red Hat rating Moderate · View on Red Hat →
Fixed in
- OpenShift Developer Tools and Services for OCP 4.9 for RHEL 8 ocp-tools-4/service-binding-operator-bundle, ocp-tools-4/service-binding-rhel8-operator
Fixes 1 record
Priority MEDIUM 43
An attacker may cause a denial of service by crafting an Accept-Language header which ParseAcceptLanguage will take significant time to parse.
CVSS 3.1HIGH 7.5· Network · No auth · No interaction · EPSS 0.01841 · Published 2022-10-14 · Partial fix · 0.3.8 CWE-772
