https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-15T21:58:04.770242+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/euvd-2026-46728 EUVD-2026-46728 2026-10-15T21:58:04.774253+00:00 EUVD-2026-46728 https://cve.radiocsirt.org/vuln/fkie_cve-2020-27816 fkie_cve-2020-27816 2026-10-15T21:58:04.774288+00:00

The elasticsearch-operator does not validate the namespace where kibana logging resource is created and due to that it is possible to replace the original openshift-logging console link (kibana console) to different one, created based on the new CR for the new kibana resource. This could lead to an arbitrary URL redirection or the openshift-logging console link damage. This flaw affects elasticsearch-operator-container versions before 4.7.

 https://cve.radiocsirt.org/vuln/gsd-2020-27816 gsd-2020-27816 2026-10-15T21:58:04.774322+00:00 gsd-2020-27816 https://cve.radiocsirt.org/vuln/rhsa-2021:0310 RHSA-2021:0310 — Red Hat Security Advisory: OpenShift Container Platform 4.6.16 extras security update 2026-10-15T21:58:04.774336+00:00

openshift/elasticsearch-operator: arbitrary URL redirection of the cluster logging kibana console