Odh-dashboard: odh-dashboard: backend port 8080 trusts x-forwarded-access-token without origin validation

{
                    "vendor": "Red Hat",
                    "product": "Red Hat OpenShift AI 2.25",
                    "collectionURL": "https://catalog.redhat.com/software/containers/",
                    "packageName": "rhoai/odh-dashboard-rhel9",
                    "defaultStatus": "affected",
                    "versions": [
                        {
                            "version": "1785940823",
                            "lessThan": "*",
                            "versionType": "rpm",
                            "status": "unaffected"
                        }
                    ],
                    "cpes": [
                        "cpe:/a:redhat:openshift_ai:2.25::el9"
                    ]
                }

{
                    "vendor": "Red Hat",
                    "product": "Red Hat OpenShift AI 2.25",
                    "collectionURL": "https://catalog.redhat.com/software/containers/",
                    "packageName": "rhoai/odh-dashboard-rhel9",
                    "defaultStatus": "affected",
                    "versions": [
                        {
                            "version": "1788312226",
                            "lessThan": "*",
                            "versionType": "rpm",
                            "status": "unaffected"
                        }
                    ],
                    "cpes": [
                        "cpe:/a:redhat:openshift_ai:2.25::el9"
                    ]
                }

{
                    "vendor": "Red Hat",
                    "product": "Red Hat OpenShift AI 3.3",
                    "collectionURL": "https://catalog.redhat.com/software/containers/",
                    "packageName": "rhoai/odh-dashboard-rhel9",
                    "defaultStatus": "affected",
                    "versions": [
                        {
                            "version": "1786109683",
                            "lessThan": "*",
                            "versionType": "rpm",
                            "status": "unaffected"
                        }
                    ],
                    "cpes": [
                        "cpe:/a:redhat:openshift_ai:3.3::el9"
                    ]
                }

{
                    "vendor": "Red Hat",
                    "product": "Red Hat OpenShift AI 3.3",
                    "collectionURL": "https://catalog.redhat.com/software/containers/",
                    "packageName": "rhoai/odh-dashboard-rhel9",
                    "defaultStatus": "affected",
                    "versions": [
                        {
                            "version": "1790128681",
                            "lessThan": "*",
                            "versionType": "rpm",
                            "status": "unaffected"
                        }
                    ],
                    "cpes": [
                        "cpe:/a:redhat:openshift_ai:3.3::el9"
                    ]
                }

{
                    "vendor": "Red Hat",
                    "product": "Red Hat OpenShift AI 3.4",
                    "collectionURL": "https://catalog.redhat.com/software/containers/",
                    "packageName": "rhoai/odh-dashboard-rhel9",
                    "defaultStatus": "affected",
                    "versions": [
                        {
                            "version": "1786109665",
                            "lessThan": "*",
                            "versionType": "rpm",
                            "status": "unaffected"
                        }
                    ],
                    "cpes": [
                        "cpe:/a:redhat:openshift_ai:3.4::el9"
                    ]
                }

{
                    "vendor": "Red Hat",
                    "product": "Red Hat OpenShift AI 3.4",
                    "collectionURL": "https://catalog.redhat.com/software/containers/",
                    "packageName": "rhoai/odh-dashboard-rhel9",
                    "defaultStatus": "affected",
                    "versions": [
                        {
                            "version": "1787347991",
                            "lessThan": "*",
                            "versionType": "rpm",
                            "status": "unaffected"
                        }
                    ],
                    "cpes": [
                        "cpe:/a:redhat:openshift_ai:3.4::el9"
                    ]
                }