Lucene search

GoogleOSV:CVE-2023-6570

HistoryDec 14, 2023 - 1:15 p.m.

CVE-2023-6570

2023-12-1413:15:55

Google

osv.dev

server-side request forgery

kubeflow

software vulnerability

6.5 Medium

CVSS3

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

LOW

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

NONE

Availability Impact

NONE

CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N

0.0005 Low

EPSS

Percentile

18.3%

JSON

Server-Side Request Forgery (SSRF) in kubeflow/kubeflow

CPENameOperatorVersion
kubefloweq0.2.0-rc.0
kubefloweq0.7.0-rc.3
kubefloweq1.7.0-rc.0
kubefloweq1.5.0-rc.0
kubefloweq1.7.0
kubefloweq1.1.0
kubefloweq0.4.0-rc.1
kubefloweq0.6.start
kubefloweq0.7.0-rc.5
kubefloweq1.7.0-rc.1

Name	Operator	Version
kubeflow	eq	0.2.0-rc.0
kubeflow	eq	0.7.0-rc.3
kubeflow	eq	1.7.0-rc.0
kubeflow	eq	1.5.0-rc.0
kubeflow	eq	1.7.0
kubeflow	eq	1.1.0
kubeflow	eq	0.4.0-rc.1
kubeflow	eq	0.6.start
kubeflow	eq	0.7.0-rc.5
kubeflow	eq	1.7.0-rc.1

Rows per page:

1-10 of 221

References

huntr.com/bounties/82d6e853-013b-4029-a23f-8b50ec56602a

6.5 Medium

CVSS3

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

LOW

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

NONE

Availability Impact

NONE

CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N

0.0005 Low

EPSS

Percentile

18.3%

JSON

Related for OSV:CVE-2023-6570