Database/Container, Kubernetes & orchestration
Cilium: Insecure default Access-Control-Allow-Origin in Hubble UI exposes sensitive observability data
CVE-2025-23047Container, Kubernetes & orchestrationcurated
Impact
Insecure default Access-Control-Allow-Origin in Hubble UI exposes sensitive observability data
Who can reach it
Anyone who can get an operator's browser to a hostile page
What to do
Upgrade Cilium; put Hubble UI behind auth
References
This entry is curated: imported from vendor advisories with machine assistance, not yet individually verified. Confirm against your vendor's advisory before acting, and report anything wrong.