A flaw was found in the OpenShift console. An unauthenticated attacker can exploit a path traversal vulnerability by manipulating the "lng" and "ns" query parameters in the "/locales/resource.json" endpoint. This allows the attacker to read sensitive "*.json" files from the pod filesystem, including plugin manifests and configuration files. Furthermore, this flaw can enable path traversal against registered dynamic-plugin backends.