795 matches found
CVE-2024-9526
There exists a stored XSS Vulnerability in Kubeflow Pipeline View web UI. The Kubeflow Web UI allows to create new pipelines. When creating a new pipeline, it is possible to add a description. The description field allows html tags, which are not filtered properly. Leading to a stored XSS. We...
CVE-2024-9526
CVE-2024-9526 describes a stored XSS in Kubeflow Pipeline View web UI. The vulnerability stems from the description field in the pipeline creation form, which allows HTML tags that are not properly filtered, enabling stored cross-site scripting. Multiple sources (NVD entry, SUSE security advisory...
CVE-2024-9526 Stored XSS in Kubeflow Pipeline View
There exists a stored XSS Vulnerability in Kubeflow Pipeline View web UI. The Kubeflow Web UI allows to create new pipelines. When creating a new pipeline, it is possible to add a description. The description field allows html tags, which are not filtered properly. Leading to a stored XSS. We...
CVE-2024-9526 Stored XSS in Kubeflow Pipeline View
There exists a stored XSS Vulnerability in Kubeflow Pipeline View web UI. The Kubeflow Web UI allows to create new pipelines. When creating a new pipeline, it is possible to add a description. The description field allows html tags, which are not filtered properly. Leading to a stored XSS. We...
PT-2024-39677 · Unknown · Kubeflow Pipeline View
Name of the Vulnerable Software and Affected Versions: Kubeflow Pipeline View affected versions not specified Description: The issue concerns a stored XSS vulnerability in the Kubeflow Pipeline View web UI. This vulnerability allows an attacker to inject malicious HTML code into the description...
Kubeflow Pipeline 安全漏洞
Kubeflow Pipeline is a machine learning pipeline for Kubeflow from Kubeflow, Inc. A security vulnerability exists in Kubeflow Pipeline that stems from the description field allowing html tags that are not properly filtered, resulting in vulnerability to stored cross-site scripting attacks...
CVE-2024-49766 vulnerabilities
Vulnerabilities for packages: py3-werkzeug, kubeflow-volumes-web-app, kubeflow-pipelines-visualization-server, airflow-core, superset, kubeflow-jupyter-web-app, mlflow, emissary, airflow...
CVE-2024-49767 vulnerabilities
Vulnerabilities for packages: py3-werkzeug, kubeflow-volumes-web-app, kubeflow-pipelines-visualization-server, airflow-core, superset, kubeflow-jupyter-web-app, mlflow, emissary, airflow...
GHSA-Q34M-JH98-GWM2 vulnerabilities
Vulnerabilities for packages: py3-werkzeug, kubeflow-volumes-web-app, kubeflow-pipelines-visualization-server, airflow-core, superset, kubeflow-jupyter-web-app, mlflow, emissary, airflow...
GHSA-F9VJ-2WH5-FJ8J vulnerabilities
Vulnerabilities for packages: py3-werkzeug, kubeflow-volumes-web-app, kubeflow-pipelines-visualization-server, airflow-core, superset, kubeflow-jupyter-web-app, mlflow, emissary, airflow...
CVE-2024-8901
The AWS ALB Route Directive Adapter For Istio repo https://github.com/awslabs/aws-alb-route-directive-adapter-for-istio/tree/master provides an OIDC authentication mechanism that was integrated into the open source Kubeflow project. The adapter uses JWT for authentication, but lacks proper signer...
CVE-2024-8901 Lack of JWT issuer and signer validation
The AWS ALB Route Directive Adapter For Istio repo https://github.com/awslabs/aws-alb-route-directive-adapter-for-istio/tree/master provides an OIDC authentication mechanism that was integrated into the open source Kubeflow project. The adapter uses JWT for authentication, but lacks proper signer...
CVE-2024-8901 Lack of JWT issuer and signer validation
The AWS ALB Route Directive Adapter For Istio repo https://github.com/awslabs/aws-alb-route-directive-adapter-for-istio/tree/master provides an OIDC authentication mechanism that was integrated into the open source Kubeflow project. The adapter uses JWT for authentication, but lacks proper signer...
GHSA-PXG6-PF52-XH8X vulnerabilities
Vulnerabilities for packages: jitsucom-jitsu, kubeflow-katib, argo-workflows, kubeflow-pipelines, thingsboard, sqlpad, kubeflow-centraldashboard...
GHSA-PXG6-PF52-XH8X vulnerabilities
Vulnerabilities for packages: argo-workflows, kubeflow-pipelines, kubeflow-centraldashboard, opensearch-dashboards, kibana, sqlpad, jitsucom-jitsu, thingsboard, opensearch-dashboards-fips, kubeflow-katib...
CVE-2024-47764 vulnerabilities
Vulnerabilities for packages: argo-workflows, kubeflow-pipelines, kubeflow-centraldashboard, opensearch-dashboards, kibana, sqlpad, jitsucom-jitsu, thingsboard, opensearch-dashboards-fips, kubeflow-katib...
CVE-2024-47764 vulnerabilities
Vulnerabilities for packages: jitsucom-jitsu, kubeflow-katib, argo-workflows, kubeflow-pipelines, thingsboard, sqlpad, kubeflow-centraldashboard...
GHSA-M6FV-JMCG-4JFG vulnerabilities
Vulnerabilities for packages: argo-workflows, kubeflow-pipelines, thingsboard, sqlpad, kubeflow-centraldashboard...