Red Hat Security Advisory

RHSA-2025:14886

Kiali 2.4.8 for Red Hat OpenShift Service Mesh 3.0

Released 2025-08-28 · Red Hat rating Moderate · View on Red Hat →

Fixed in

Red Hat OpenShift Service Mesh 3.0 registry.redhat.io/openshift-service-mesh/kiali-ossmc-rhel9, registry.redhat.io/openshift-service-mesh/kiali-rhel9

TI-2025-07108 CVE-2025-7783 · GHSA-fjxv-7rqg-78g4

HIGH 76

Use of Insufficiently Random Values vulnerability in form-data allows HTTP Parameter Pollution (HPP).

CVSS 4.0CRITICAL 9.4 Network No auth No interaction EPSS 0.0181 Published 2025-07-18 Partial fix · 2.5.4, 3.0.4 +1 CWE-330