CVE-2025-5198
Stackrox: xss in stackrox
We use these services and cookies to improve your user experience. You may opt out if you wish, however, this may limit some features on this site.
Please see our statement on Data Privacy.
Stackrox: xss in stackrox
A flaw was found in Stackrox, where it is vulnerable to Cross-site scripting (XSS) if the script code is included in a small subset of table cells. The only known potential exploit is if the script is included in the name of a Kubernetes “Role” object* that is applied to a secured cluster. This object can be used by a user with access to the cluster or through a compromised third-party product.
Reserved 2025-05-26 | Published 2025-05-27 | Updated 2025-05-28 | Assigner redhatImproper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
| 2025-05-26: | Reported to Red Hat. |
| 2025-05-26: | Made public. |
access.redhat.com/security/cve/CVE-2025-5198
bugzilla.redhat.com/show_bug.cgi?id=2368568 (RHBZ#2368568)
Support options
