795 matches found
GHSA-9V9H-CGJ8-H64P vulnerabilities
Vulnerabilities for packages: openssl, mitmproxy, py3-cassandra-medusa, ggshield, az, kubeflow-pipelines...
GHSA-9V9H-CGJ8-H64P vulnerabilities
Vulnerabilities for packages: az, ggshield, openssl, kubeflow-pipelines, py3-cassandra-medusa, mitmproxy...
CVE-2024-0727 vulnerabilities
Vulnerabilities for packages: openssl, mitmproxy, py3-cassandra-medusa, ggshield, az, kubeflow-pipelines...
CVE-2024-0727 vulnerabilities
Vulnerabilities for packages: az, ggshield, openssl, kubeflow-pipelines, py3-cassandra-medusa, mitmproxy...
GHSA-JCHW-25XP-JWWC vulnerabilities
Vulnerabilities for packages: opensearch-dashboards-fips, arangodb, kubeflow-pipelines, kibana, kubeflow-centraldashboard, configurable-http-proxy, opensearch-dashboards, lerna...
GHSA-JCHW-25XP-JWWC vulnerabilities
Vulnerabilities for packages: configurable-http-proxy, kubeflow-pipelines, lerna, kubeflow-centraldashboard...
CVE-2023-26159 vulnerabilities
Vulnerabilities for packages: opensearch-dashboards-fips, arangodb, kubeflow-pipelines, kibana, kubeflow-centraldashboard, configurable-http-proxy, opensearch-dashboards, lerna...
CVE-2023-26159 vulnerabilities
Vulnerabilities for packages: configurable-http-proxy, kubeflow-pipelines, lerna, kubeflow-centraldashboard...
Kubeflow Cross-Site Scripting Vulnerability
Kubeflow is a cloud-native platform open-sourced by Kubeflow. Kubeflow cross-site scripting vulnerability , the vulnerability stems from the source parameter of the user-supplied data lack of effective filtering and escaping , an attacker can use this vulnerability to hijack the account through...
CVE-2023-6571
A cross-site scripting XSS vulnerability was found in kubeflow's presentation of pipeline cards. This issue may allow an attacker to trick a user into visiting a specially crafted link that could inject malicious HTML into the victim's browser. The highest threat from this vulnerability is to dat...
CVE-2023-6570
A Server-Side Request Forgery SSRF flaw was found in kubeflow. Any user can use kubeflow as a proxy to access internal or external resources and have the response returned to the user by supplying a url to the namespace parameter in /pipeline/artifacts/get. This issue could allow an attacker to...
CVE-2023-6570
Server-Side Request Forgery SSRF in kubeflow/kubeflow...
CVE-2023-6571
Cross-site Scripting XSS - Reflected in kubeflow/kubeflow...
Server side request forgery (ssrf)
Server-Side Request Forgery SSRF in kubeflow/kubeflow...
Cross site scripting
Cross-site Scripting XSS - Reflected in kubeflow/kubeflow...
CVE-2023-6571 Cross-site Scripting (XSS) - Reflected in kubeflow/kubeflow
Cross-site Scripting XSS - Reflected in kubeflow/kubeflow...
CVE-2023-6571 Cross-site Scripting (XSS) - Reflected in kubeflow/kubeflow
Cross-site Scripting XSS - Reflected in kubeflow/kubeflow...
CVE-2023-6571
CVE-2023-6571 is a reflected Cross-site Scripting (XSS) vulnerability in Kubeflow (kubeflow/kubeflow) affecting the presentation of pipeline cards. Root cause per the provided CNVD/Red Hat entries is lack of proper filtering/escaping of the source parameter of user-supplied data, enabling injecti...