Lucene search
GoogleOSV:CVE-2023-22479HistoryJan 10, 2023 - 9:15 p.m.
CVE-2023-22479
2023-01-1021:15:12
Google
osv.dev
5
kubernetes
panel
session fixation
attacker
hijack
legitimate user
patch
version 1.6.4
7.5 High
CVSS3
Attack Vector
NETWORK
Attack Complexity
HIGH
Privileges Required
NONE
User Interaction
REQUIRED
Scope
UNCHANGED
Confidentiality Impact
HIGH
Integrity Impact
HIGH
Availability Impact
HIGH
CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H
0.001 Low
EPSS
Percentile
30.6%
KubePi is a modern Kubernetes panel. A session fixation attack allows an attacker to hijack a legitimate user session, versions 1.6.3 and below are susceptible. A patch will be released in version 1.6.4.
Related
cve
cve
CVE-2023-22479
2023-01-10 21:15:12
osv
osv
gitlab
gitlab
Session Fixation
2023-01-10 00:00:00
Duplicate of ./go/github.com/KubeOperator/KubePi/CVE-2023-22479.yml
2023-01-09 00:00:00
Session Fixation
2023-01-10 00:00:00
nvd
nvd
CVE-2023-22479
2023-01-10 21:15:12
veracode
veracode
Session Fixation
2023-01-19 04:54:45
prion
prion
Session fixation
2023-01-10 21:15:00
cvelist
cvelist
CVE-2023-22479 KubePi vulnerable to session fixation attack
2023-01-10 20:34:08
github
github
7.5 High
CVSS3
Attack Vector
NETWORK
Attack Complexity
HIGH
Privileges Required
NONE
User Interaction
REQUIRED
Scope
UNCHANGED
Confidentiality Impact
HIGH
Integrity Impact
HIGH
Availability Impact
HIGH
CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H
0.001 Low
EPSS
Percentile
30.6%
Related for OSV:CVE-2023-22479