CVE-2023-22478

See a problem?
Source
https://nvd.nist.gov/vuln/detail/CVE-2023-22478
Import Source
https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2023-22478.json
JSON Data
https://api.osv.dev/v1/vulns/CVE-2023-22478
Aliases
Published
2023-01-14T01:15:14Z
Modified
2024-08-20T20:58:54.905393Z
Severity
  • 7.5 (High) CVSS_V3 - CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N CVSS Calculator
Summary
[none]
Details

KubePi is a modern Kubernetes panel. The API interfaces with unauthorized entities and may leak sensitive information. This issue has been patched in version 1.6.4. There are currently no known workarounds.

References

Affected packages

Git / github.com/1panel-dev/kubepi

Affected ranges

Type
GIT
Repo
https://github.com/1panel-dev/kubepi
Events
Introduced
0 Unknown introduced commit / All previous commits are affected
Fixed
Type
GIT
Repo
https://github.com/kubeoperator/kubepi
Events
Introduced
0 Unknown introduced commit / All previous commits are affected
Fixed

Affected versions

v1.*

v1.0.0
v1.0.1
v1.1.0
v1.1.1
v1.1.2
v1.2.0
v1.2.1
v1.3.0
v1.4.0
v1.4.1
v1.4.2
v1.5.0
v1.5.1
v1.5.2
v1.5.3
v1.6.0
v1.6.1
v1.6.2
v1.6.3