https://cve.radiocsirt.org Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Tue, 20 Oct 2026 15:30:02 +0000 https://cve.radiocsirt.org/vuln/fkie_cve-2022-2220 <p>Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: none. Reason: This candidate was withdrawn by its CNA. Further investigation showed that it was not a security issue. Notes: none.</p> <p>Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: none. Reason: This candidate was withdrawn by its CNA. Further investigation showed that it was not a security issue. Notes: none.</p> https://cve.radiocsirt.org/vuln/fkie_cve-2022-2220 https://cve.radiocsirt.org/vuln/ghsa-h7wr-5h24-xrvw <p>OpenShift doesn&#39;t properly verify subdomain ownership, which allows route takeover. Once a custom route is created, the user must update the DNS provider by creating a canonical name (CNAME) record (if he likes to expose this route externally). The CNAME record should point the custom domain to the OpenShift router as the alias. In a case that the CNAME is not removed when the route is not in use anymore we are dealing with a dangling route. A malicious actor may take over the route.</p> <p>OpenShift doesn&#39;t properly verify subdomain ownership, which allows route takeover. Once a custom route is created, the user must update the DNS provider by creating a canonical name (CNAME) record (if he likes to expose this route externally). The CNAME record should point the custom domain to the OpenShift router as the alias. In a case that the CNAME is not removed when the route is not in use anymore we are dealing with a dangling route. A malicious actor may take over the route.</p> https://cve.radiocsirt.org/vuln/ghsa-h7wr-5h24-xrvw https://cve.radiocsirt.org/vuln/gsd-2022-2220 gsd-2022-2220 https://cve.radiocsirt.org/vuln/gsd-2022-2220