CVE-2023-50253

creationtimestamp| type| source ---|---|--- 2024-01-03 18:31:51+00:00| seen| https://t.me/ctinow/162522 2024-01-04 01:36:58+00:00| seen| https://t.me/cibsecurity/74333 2024-01-05 13:35:54+00:00| seen| https://t.me/arpsyndicate/2476 2024-01-23 21:26:17+00:00| seen| https://t.me/ctinow/172309...

CVE-2023-50253 laf logs leak

Laf is a cloud development platform. In the Laf version design, the log uses communication with k8s to quickly retrieve logs from the container without the need for additional storage. However, in version 1.0.0-beta.13 and prior, this interface does not verify the permissions of the pod, which...

CVE-2023-50253 laf logs leak

Laf is a cloud development platform. In the Laf version design, the log uses communication with k8s to quickly retrieve logs from the container without the need for additional storage. However, in version 1.0.0-beta.13 and prior, this interface does not verify the permissions of the pod, which...

CVE-2023-50253

Summary: CVE-2023-50253 affects Laf, a cloud development platform. Versions 1.0.0-beta.13 and earlier expose a log retrieval interface that does not verify pod permissions, allowing authenticated users to read any pod logs within the same namespace and access sensitive information printed in logs...

CVE-2023-50253 laf logs leak

Laf is a cloud development platform. In the Laf version design, the log uses communication with k8s to quickly retrieve logs from the container without the need for additional storage. However, in version 1.0.0-beta.13 and prior, this interface does not verify the permissions of the pod, which...