7 matches found
CVE-2024-5552
kubeflow/kubeflow is vulnerable to a Regular Expression Denial of Service ReDoS attack due to inefficient regular expression complexity in its email validation mechanism. An attacker can remotely exploit this vulnerability without authentication by providing specially crafted input that causes th...
CVE-2024-5552: Inefficient Regular Expression Complexity
kubeflow/kubeflow is vulnerable to a Regular Expression Denial of Service ReDoS attack due to inefficient regular expression complexity in its email validation mechanism. An attacker can remotely exploit this vulnerability without authentication by providing specially crafted input that causes th...
CVE-2023-6571 Cross-site Scripting (XSS) - Reflected in kubeflow/kubeflow
Cross-site Scripting XSS - Reflected in kubeflow/kubeflow...
CVE-2023-6571
Cross-site Scripting XSS - Reflected in kubeflow/kubeflow...
CVE-2023-6570 Server-Side Request Forgery (SSRF) in kubeflow/kubeflow
Server-Side Request Forgery SSRF in kubeflow/kubeflow...