Vulnerabilities
Misconfiguration
Compliance
CVE Vulnerabilities

CVE-2025-22870

Misinterpretation of Input

Published: Mar 12, 2025 | Modified: Jun 17, 2026
CVSS 3.x
N/A
Source:
NVD
CVSS 2.x
RedHat/V2
RedHat/V3
4.4 MODERATE
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:L
Ubuntu
MEDIUM
Vulnerability-free packages from our partners
root.io logo minimus.io logo echo.ai logo
Additional information
NVDhttps://nvd.nist.gov/vuln/detail/CVE-2025-22870
CWEhttps://cwe.mitre.org/data/definitions/115.html

Matching of hosts against proxy patterns can improperly treat an IPv6 zone ID as a hostname component. For example, when the NO_PROXY environment variable is set to *.example.com, a request to [::1%25.example.com]:80` will incorrectly match and not be proxied.

Weakness

The product misinterprets an input, whether from an attacker or another product, in a security-relevant fashion.

Affected Software

NameVendorStart VersionEnd Version
RHODF-4.18-RHEL-9RedHatodf4/cephcsi-operator-bundle:v4.18.3-4*
RHODF-4.18-RHEL-9RedHatodf4/cephcsi-rhel9:v4.18.3-2*
RHODF-4.18-RHEL-9RedHatodf4/cephcsi-rhel9-operator:v4.18.3-2*
RHODF-4.18-RHEL-9RedHatodf4/mcg-core-rhel9:v4.18.3-3*
RHODF-4.18-RHEL-9RedHatodf4/mcg-operator-bundle:v4.18.3-4*
RHODF-4.18-RHEL-9RedHatodf4/mcg-rhel9-operator:v4.18.3-3*
RHODF-4.18-RHEL-9RedHatodf4/ocs-client-console-rhel9:v4.18.3-2*
RHODF-4.18-RHEL-9RedHatodf4/ocs-client-operator-bundle:v4.18.3-4*
RHODF-4.18-RHEL-9RedHatodf4/ocs-client-rhel9-operator:v4.18.3-2*
RHODF-4.18-RHEL-9RedHatodf4/ocs-metrics-exporter-rhel9:v4.18.3-2*
RHODF-4.18-RHEL-9RedHatodf4/ocs-operator-bundle:v4.18.3-4*
RHODF-4.18-RHEL-9RedHatodf4/ocs-rhel9-operator:v4.18.3-2*
RHODF-4.18-RHEL-9RedHatodf4/odf-cli-rhel9:v4.18.3-3*
RHODF-4.18-RHEL-9RedHatodf4/odf-console-rhel9:v4.18.3-2*
RHODF-4.18-RHEL-9RedHatodf4/odf-cosi-sidecar-rhel9:v4.18.3-2*
RHODF-4.18-RHEL-9RedHatodf4/odf-csi-addons-operator-bundle:v4.18.3-4*
RHODF-4.18-RHEL-9RedHatodf4/odf-csi-addons-rhel9-operator:v4.18.3-2*
RHODF-4.18-RHEL-9RedHatodf4/odf-csi-addons-sidecar-rhel9:v4.18.3-2*
RHODF-4.18-RHEL-9RedHatodf4/odf-dependencies-operator-bundle:v4.18.3-4*
RHODF-4.18-RHEL-9RedHatodf4/odf-multicluster-console-rhel9:v4.18.3-2*
RHODF-4.18-RHEL-9RedHatodf4/odf-multicluster-operator-bundle:v4.18.3-4*
RHODF-4.18-RHEL-9RedHatodf4/odf-multicluster-rhel9-operator:v4.18.3-2*
RHODF-4.18-RHEL-9RedHatodf4/odf-must-gather-rhel9:v4.18.3-2*
RHODF-4.18-RHEL-9RedHatodf4/odf-operator-bundle:v4.18.3-4*
RHODF-4.18-RHEL-9RedHatodf4/odf-prometheus-operator-bundle:v4.18.3-4*
RHODF-4.18-RHEL-9RedHatodf4/odf-rhel9-operator:v4.18.3-2*
RHODF-4.18-RHEL-9RedHatodf4/odr-cluster-operator-bundle:v4.18.3-4*
RHODF-4.18-RHEL-9RedHatodf4/odr-hub-operator-bundle:v4.18.3-4*
RHODF-4.18-RHEL-9RedHatodf4/odr-recipe-operator-bundle:v4.18.3-4*
RHODF-4.18-RHEL-9RedHatodf4/odr-rhel9-operator:v4.18.3-2*
RHODF-4.18-RHEL-9RedHatodf4/rook-ceph-operator-bundle:v4.18.3-4*
RHODF-4.18-RHEL-9RedHatodf4/rook-ceph-rhel9-operator:v4.18.3-2*
Cluster Observability Operator 1.5.0RedHatcluster-observability-operator/distributed-tracing-console-plugin-pf4-rhel9:1782840519*
Cluster Observability Operator 1.5.0RedHatcluster-observability-operator/logging-console-plugin-pf4-rhel9:1782839279*
Cluster Observability Operator 1.5.0RedHatcluster-observability-operator/logging-console-plugin-pf5-rhel9:1782840539*
Cluster Observability Operator 1.5.0RedHatcluster-observability-operator/monitoring-console-plugin-pf5-rhel9:1782844225*
Cluster Observability Operator 1.5.0RedHatcluster-observability-operator/monitoring-console-plugin-pf6-rhel9:1782839658*
Cluster Observability Operator 1.5.0RedHatcluster-observability-operator/monitoring-console-plugin-rhel9:1782838476*
Red Hat Developer Hub 1.7RedHatrhdh/rhdh-rhel9-operator:1.7.0-1754935808*
Red Hat Openshift Data Foundation 4.2RedHatodf4/cephcsi-rhel9:1774540992*
Red Hat Openshift Data Foundation 4.2RedHatodf4/cephcsi-rhel9-operator:1774540668*
Red Hat Openshift Data Foundation 4.2RedHatodf4/mcg-core-rhel9:1774541259*
Red Hat Openshift Data Foundation 4.2RedHatodf4/mcg-rhel9-operator:1774541345*
Red Hat Openshift Data Foundation 4.2RedHatodf4/ocs-client-console-rhel9:1774541880*
Red Hat Openshift Data Foundation 4.2RedHatodf4/ocs-client-rhel9-operator:1774541518*
Red Hat Openshift Data Foundation 4.2RedHatodf4/ocs-metrics-exporter-rhel9:1774541420*
Red Hat Openshift Data Foundation 4.2RedHatodf4/ocs-rhel9-operator:1774541448*
Red Hat Openshift Data Foundation 4.2RedHatodf4/odf-cli-rhel9:1774541663*
Red Hat Openshift Data Foundation 4.2RedHatodf4/odf-cloudnative-pg-rhel9-operator:1774541469*
Red Hat Openshift Data Foundation 4.2RedHatodf4/odf-console-rhel9:1774542075*
Red Hat Openshift Data Foundation 4.2RedHatodf4/odf-cosi-sidecar-rhel9:1774541617*
Red Hat Openshift Data Foundation 4.2RedHatodf4/odf-csi-addons-rhel9-operator:1774541614*
Red Hat Openshift Data Foundation 4.2RedHatodf4/odf-csi-addons-sidecar-rhel9:1774541633*
Red Hat Openshift Data Foundation 4.2RedHatodf4/odf-external-snapshotter-rhel9-operator:1774541625*
Red Hat Openshift Data Foundation 4.2RedHatodf4/odf-external-snapshotter-sidecar-rhel9:1774541625*
Red Hat Openshift Data Foundation 4.2RedHatodf4/odf-multicluster-console-rhel9:1774542179*
Red Hat Openshift Data Foundation 4.2RedHatodf4/odf-multicluster-rhel9-operator:1774541779*
Red Hat Openshift Data Foundation 4.2RedHatodf4/odf-must-gather-rhel9:1774541857*
Red Hat Openshift Data Foundation 4.2RedHatodf4/odf-rhel9-operator:1774541919*
Red Hat Openshift Data Foundation 4.2RedHatodf4/odr-rhel9-operator:1774541919*
Red Hat Openshift Data Foundation 4.2RedHatodf4/rook-ceph-rhel9-operator:1774542101*
Golang-1.10Ubuntuesm-infra/xenial*
Golang-1.13Ubuntuesm-apps/xenial*
Golang-1.13Ubuntufocal*
Golang-1.14Ubuntufocal*
Golang-1.16Ubuntufocal*
Golang-1.18Ubuntuesm-apps/xenial*
Golang-1.18Ubuntufocal*
Golang-1.20Ubuntufocal*
Golang-1.21Ubuntufocal*
Golang-1.22Ubuntuesm-apps/jammy*
Golang-1.22Ubuntufocal*
Golang-1.22Ubuntujammy*
Golang-1.22Ubuntunoble*
Golang-1.22Ubuntuoracular*
Golang-1.23Ubuntuoracular*
Golang-1.23Ubuntuplucky*
Golang-1.24Ubuntuplucky*
Golang-1.6Ubuntuesm-infra/xenial*

References

Aqua Security is the largest pure-play cloud native security company, providing customers the freedom to innovate and run their businesses with minimal friction. The Aqua Cloud Native Security Platform provides prevention, detection, and response automation across the entire application lifecycle to secure the build, secure cloud infrastructure and secure running workloads wherever they are deployed.
Copyright © 2026 Aqua Security Software Ltd.   Privacy Policy | Terms of Use