CVE-2025-5198

See a problem?
Please try reporting it to the source first.
Source
https://cve.org/CVERecord?id=CVE-2025-5198
Import Source
https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2025-5198.json
JSON Data
https://api.osv.dev/v1/vulns/CVE-2025-5198
Published
2025-05-27T20:51:34.287Z
Modified
2026-08-12T03:51:18.449853471Z
Severity
  • 5.0 (Medium) CVSS_V3 - CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:L/I:L/A:L CVSS Calculator
Summary
Stackrox: xss in stackrox
Details

A flaw was found in Stackrox, where it is vulnerable to Cross-site scripting (XSS) if the script code is included in a small subset of table cells. The only known potential exploit is if the script is included in the name of a Kubernetes “Role” object* that is applied to a secured cluster. This object can be used by a user with access to the cluster or through a compromised third-party product.

Database specific 
{
    "cwe_ids": [
        "CWE-79"
    ],
    "osv_generated_from": "https://github.com/CVEProject/cvelistV5/tree/main/cves/2025/5xxx/CVE-2025-5198.json",
    "cna_assigner": "redhat"
}
References

Affected packages

Git / github.com/stackrox/stackrox

Affected ranges

Type
GIT
Repo
https://github.com/stackrox/stackrox
Events
Introduced
cf97bbc2a499eba66f3de391ba671867ff3b6045
Fixed
96b26691231732b320fc4087db237908ed80d660
Introduced
9eaa9e8a126c5d5eabee7fa7959d5935b12b31f4
Fixed
8c7953a822fb21fd84275331c0fcff9892959b4a
Database specific
Show details 
{
    "source": "AFFECTED_FIELD",
    "extracted_events": [
        {
            "introduced": "4.4.0"
        },
        {
            "fixed": "4.4.8"
        },
        {
            "introduced": "4.5.0"
        },
        {
            "fixed": "4.5.6"
        }
    ]
}

Affected versions

4.*
4.0
4.4.0
4.4.1
4.4.1-rc.1
4.4.1-rc.2
4.4.1-rc.3
4.4.1-rc.4
4.4.1-rc.5
4.4.2
4.4.2-rc.1
4.4.3
4.4.3-rc.1
4.4.3-rc.2
4.4.3-rc.3
4.4.4
4.4.4-rc.1
4.4.4-rc.2
4.4.5
4.4.5-rc.1
4.4.5-rc.2
4.4.5-rc.3
4.4.6
4.4.6-rc.1
4.4.6-rc.2
4.4.7
4.4.7-rc.1
4.4.8-rc.1
4.4.8-rc.2
4.4.8-rc.3

Database specific

source 
"https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2025-5198.json"