Vulnerability in Red Hat Openshift Service Mesh 2
CVE-2025-0754
The vulnerability was found in OpenShift Service Mesh 2.6.3 and 2.5.6. This issue occurs due to improper sanitization of HTTP headers by Envoy, particularly the x-forwarded-for header. This lack of sanitization can allow attackers to inject malicious payloads into service mesh logs, leading to log injection and spoofing attacks. Such injections can mislead logging mechanisms, enabling attackers to manipulate log entries or execute reflected cross-site scripting (XSS) attacks.
EPSS: 0.003 (16.9th percentile) — read the EPSS interpretation.
CVSS v3 metric
CVSS v3 base score 4.3 (Medium). Vector: CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:N.
Affected products
Weakness classification (CWE)
References
- secalert@redhat.com (x_refsource_REDHAT, vdb-entry)
- secalert@redhat.com (x_refsource_REDHAT, issue-tracking)
Frequently asked questions
- What is CVE-2025-0754?
- CVE-2025-0754 is a medium-severity vulnerability in Red Hat Openshift Service Mesh 2, classified under Improper Output Neutralization for Logs. CVSS score: 4.3/10. Published 2025-01-28.
- How severe is CVE-2025-0754?
- Medium severity. CVSS v3 base score is 4.3 out of 10.