CVE-2025-5417

See a problem?
Please try reporting it to the source first.

Source

https://cve.org/CVERecord?id=CVE-2025-5417

Import Source

https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2025-5417.json

JSON Data

https://api.osv.dev/v1/vulns/CVE-2025-5417

Published

2025-08-19T04:28:08.316Z

Modified

2026-07-15T01:49:00.148365963Z

Severity

6.1 (Medium) CVSS_V3 - CVSS:3.1/AV:A/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:N CVSS Calculator

Summary

Rhdh: red hat developer hub user permissions

Details

An insufficient access control vulnerability was found in the Red Hat Developer Hub rhdh/rhdh-hub-rhel9 container image. The Red Hat Developer Hub cluster admin/user, who has standard user access to the cluster, and the Red Hat Developer Hub namespace, can access the rhdh/rhdh-hub-rhel9 container image and modify the image's content. This issue affects the confidentiality and integrity of the data, and any changes made are not permanent, as they reset after the pod restarts.

Database specific

{
    "osv_generated_from": "https://github.com/CVEProject/cvelistV5/tree/main/cves/2025/5xxx/CVE-2025-5417.json",
    "cwe_ids": [
        "CWE-266"
    ],
    "cna_assigner": "redhat"
}

References

Affected packages

Git / github.com/redhat-developer/rhdh

Affected ranges

Type

GIT

Repo

https://github.com/redhat-developer/rhdh

Events

Introduced

Fixed

ad48a214c231438c1f91bf30fb04b3ad421500a7

Database specific

{
    "extracted_events": [
        {
            "introduced": "0"
        },
        {
            "fixed": "1.7.0"
        }
    ],
    "source": "AFFECTED_FIELD"
}

Database specific

source

"https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2025-5417.json"