CVE-2023-6570

CVE-2023-6570 describes a Server-Side Request Forgery (SSRF) in kubeflow/kubeflow. The Red Hat entry explains that any user can cause the Kubeflow server to proxy requests via the namespace parameter in /pipeline/artifacts/get, potentially hijacking a user session by stealing the authentication c...

Kubeflow 跨站脚本漏洞

Kubeflow is a cloud-native platform open-sourced by Kubeflow. Kubeflow cross-site scripting vulnerability , the vulnerability stems from the source parameter of the user-supplied data lack of effective filtering and escaping , an attacker can use this vulnerability to hijack the account through...

PT-2023-32698 · Kubeflow · Kubeflow

Name of the Vulnerable Software and Affected Versions: kubeflow/kubeflow affected versions not specified Description: The issue is related to Server-Side Request Forgery SSRF in kubeflow/kubeflow. No information is provided about the estimated number of potentially affected devices worldwide or...

PT-2023-32699 · Kubeflow · Kubeflow

Name of the Vulnerable Software and Affected Versions: kubeflow/kubeflow affected versions not specified Description: The issue is related to Cross-site Scripting XSS - Reflected. This means an attacker can inject malicious scripts into a website, which are then executed by the user's browser. No...

Kubeflow Code Issues Vulnerabilities

Kubeflow is a cloud-native platform open-sourced by Kubeflow. A code issue vulnerability exists in Kubeflow that stems from the fact that any user can use Kubeflow as a proxy to access internal and external resources and return the requested response to the user...

GHSA-H56G-GQ9V-VC8R vulnerabilities

Vulnerabilities for packages: kubeflow-pipelines-visualization-server...

GHSA-H56G-GQ9V-VC8R vulnerabilities

Vulnerabilities for packages: kubeflow-pipelines-visualization-server...

CVE-2023-49080 vulnerabilities

Vulnerabilities for packages: kubeflow-pipelines-visualization-server...

CVE-2023-49080 vulnerabilities

Vulnerabilities for packages: kubeflow-pipelines-visualization-server...

GHSA-Q78C-GWQW-JCMC vulnerabilities

Vulnerabilities for packages: kubeflow-pipelines, aws-efs-csi-driver...

CVE-2023-3955 vulnerabilities

Vulnerabilities for packages: kubeflow-pipelines, aws-efs-csi-driver...

CVE-2023-3955 vulnerabilities

Vulnerabilities for packages: aws-efs-csi-driver, aws-efs-csi-driver-fips, kubeflow-pipelines...

GHSA-M425-MQ94-257G vulnerabilities

Vulnerabilities for packages: kubeflow-fips, volume-modifier-for-k8s-fips, timestamp-authority-fips, aws-efs-csi-driver-fips, up, kiam, metrics-server-fips, vault-csi-provider, dgraph, spark-operator, dynamic-localpv-provisioner-fips, kubernetes-csi-livenessprobe-fips, scorecard, kubeflow,...

GHSA-M425-MQ94-257G vulnerabilities

Vulnerabilities for packages: dgraph, k3d, cortex, aactl, spark-operator, slsa-verifier, kubescape, buildkitd, src, kubeflow, terraform-provider-sendgrid, kubevela, up, scorecard...

CVE-2023-46136 vulnerabilities

Vulnerabilities for packages: py3-tensorflow-serving-api, py3-werkzeug, kubeflow-volumes-web-app, kubeflow-pipelines-visualization-server, kubeflow-jupyter-web-app, airflow...

CVE-2023-46136 vulnerabilities

Vulnerabilities for packages: airflow-core, py3-tensorflow-serving-api, py3-werkzeug, kubeflow-pipelines-visualization-server, kubeflow-volumes-web-app, kubeflow-jupyter-web-app, airflow...

GHSA-HRFV-MQP8-Q5RW vulnerabilities

Vulnerabilities for packages: airflow-core, py3-tensorflow-serving-api, py3-werkzeug, kubeflow-pipelines-visualization-server, kubeflow-volumes-web-app, kubeflow-jupyter-web-app, airflow...

GHSA-HRFV-MQP8-Q5RW vulnerabilities

Vulnerabilities for packages: py3-tensorflow-serving-api, py3-werkzeug, kubeflow-volumes-web-app, kubeflow-pipelines-visualization-server, kubeflow-jupyter-web-app, airflow...

GHSA-G4MX-Q9VG-27P4 vulnerabilities

Vulnerabilities for packages: py3-cassandra-medusa, py3-tensorflow-serving-api, kubeflow-volumes-web-app, az, py3-pipenv, kubeflow-katib, kubeflow-jupyter-web-app, jwt-tool...

GHSA-G4MX-Q9VG-27P4 vulnerabilities

Vulnerabilities for packages: py3-pipenv, az, kubeflow-katib, py3-tensorflow-serving-api, py3.13-scanner-test-libraries, jwt-tool, nvidia-nsight-compute-13.2, request-1276, kubeflow-volumes-web-app, py3-cassandra-medusa, k8s-sidecar, kubeflow-jupyter-web-app, nvidia-nsight-compute-13.1...