Envoyproxy: openshift service mesh 2.6.3 and 2.5.6 envoy header handling allows log injection and potential spoofing
Published Jan 28, 2025
4.3
MEDIUMCVSS 3.1
EPSS 0.26%
Description
The vulnerability was found in OpenShift Service Mesh 2.6.3 and 2.5.6. This issue occurs due to improper sanitization of HTTP headers by Envoy, particularly the x-forwarded-for header. This lack of sanitization can allow attackers to inject malicious payloads into service mesh logs, leading to log injection and spoofing attacks. Such injections can mislead logging mechanisms, enabling attackers to manipulate log entries or execute reflected cross-site scripting (XSS) attacks.
Affected products
Default status is the baseline for the product, each version can override it (e.g. patched versions marked unaffected).
| Vendor | Product | Default status | Versions | |||
|---|---|---|---|---|---|---|
| Red Hat | OpenShift Service Mesh 2 | affected |
|
No data.
No data.
OpenShift Service Mesh 2
openshift-service-mesh/proxyv2-rhel8
Fix deferred
OpenShift Service Mesh 2
openshift-service-mesh/proxyv2-rhel9
Will not fix
| Product | Package | State | Advisory |
|---|---|---|---|
| OpenShift Service Mesh 2 | openshift-service-mesh/proxyv2-rhel8 | Fix deferred | n/a |
| OpenShift Service Mesh 2 | openshift-service-mesh/proxyv2-rhel9 | Will not fix | n/a |
No package ranges for this CVE.
Remediation
No remediation recorded yet.
References (4)
- https://access.redhat.com/security/cve/CVE-2025-0754 vdb-entryx_refsource_REDHATVendor Advisory
- https://bugzilla.redhat.com/show_bug.cgi?id=2339147 issue-trackingx_refsource_REDHATIssue Tracking
- https://nvd.nist.gov/vuln/detail/CVE-2025-0754
- https://www.cve.org/CVERecord?id=CVE-2025-0754
| Link | Providers | Tags |
|---|---|---|
| https://access.redhat.com/security/cve/CVE-2025-0754 | vdb-entryx_refsource_REDHATVendor Advisory | |
| https://bugzilla.redhat.com/show_bug.cgi?id=2339147 | issue-trackingx_refsource_REDHATIssue Tracking | |
| https://nvd.nist.gov/vuln/detail/CVE-2025-0754 | ||
| https://www.cve.org/CVERecord?id=CVE-2025-0754 |
Change history (0)
No recorded changes yet.