Lucene search

GoogleOSV:CVE-2023-6571

HistoryDec 14, 2023 - 1:15 p.m.

CVE-2023-6571

2023-12-1413:15:55

Google

osv.dev

cve-2023-6571

cross-site scripting

xss

reflected

kubeflow/kubeflow

software

6.1 Medium

CVSS3

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

REQUIRED

Scope

CHANGED

Confidentiality Impact

LOW

Integrity Impact

LOW

Availability Impact

NONE

CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N

0.0005 Low

EPSS

Percentile

17.1%

JSON

Cross-site Scripting (XSS) - Reflected in kubeflow/kubeflow

CPENameOperatorVersion
kubefloweq0.2.0-rc.0
kubefloweq0.7.0-rc.3
kubefloweq1.7.0-rc.0
kubefloweq1.5.0-rc.0
kubefloweq1.7.0
kubefloweq1.1.0
kubefloweq0.4.0-rc.1
kubefloweq0.6.start
kubefloweq0.7.0-rc.5
kubefloweq1.7.0-rc.1

Name	Operator	Version
kubeflow	eq	0.2.0-rc.0
kubeflow	eq	0.7.0-rc.3
kubeflow	eq	1.7.0-rc.0
kubeflow	eq	1.5.0-rc.0
kubeflow	eq	1.7.0
kubeflow	eq	1.1.0
kubeflow	eq	0.4.0-rc.1
kubeflow	eq	0.6.start
kubeflow	eq	0.7.0-rc.5
kubeflow	eq	1.7.0-rc.1

Rows per page:

1-10 of 221

References

huntr.com/bounties/f02781e7-2a53-4c66-aa32-babb16434632

6.1 Medium

CVSS3

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

REQUIRED

Scope

CHANGED

Confidentiality Impact

LOW

Integrity Impact

LOW

Availability Impact

NONE

CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N

0.0005 Low

EPSS

Percentile

17.1%

JSON

Related for OSV:CVE-2023-6571