795 matches found
GHSA-9V9H-CGJ8-H64P vulnerabilities
Vulnerabilities for packages: mitmproxy, openssl, py3-cassandra-medusa, kubeflow-pipelines, az, ggshield...
GHSA-9V9H-CGJ8-H64P vulnerabilities
Vulnerabilities for packages: kubeflow-pipelines, openssl, py3-cassandra-medusa, ggshield, mitmproxy, az...
CVE-2024-0727 vulnerabilities
Vulnerabilities for packages: mitmproxy, openssl, py3-cassandra-medusa, kubeflow-pipelines, az, ggshield...
CVE-2024-0727 vulnerabilities
Vulnerabilities for packages: kubeflow-pipelines, openssl, py3-cassandra-medusa, ggshield, mitmproxy, az...
GHSA-JCHW-25XP-JWWC vulnerabilities
Vulnerabilities for packages: lerna, kubeflow-pipelines, kubeflow-centraldashboard, kibana, configurable-http-proxy, arangodb, opensearch-dashboards, opensearch-dashboards-fips...
GHSA-JCHW-25XP-JWWC vulnerabilities
Vulnerabilities for packages: configurable-http-proxy, kubeflow-centraldashboard, kubeflow-pipelines, lerna...
CVE-2023-26159 vulnerabilities
Vulnerabilities for packages: lerna, kubeflow-pipelines, kubeflow-centraldashboard, kibana, configurable-http-proxy, arangodb, opensearch-dashboards, opensearch-dashboards-fips...
CVE-2023-26159 vulnerabilities
Vulnerabilities for packages: configurable-http-proxy, kubeflow-centraldashboard, kubeflow-pipelines, lerna...
Kubeflow Cross-Site Scripting Vulnerability
Kubeflow is a cloud-native platform open-sourced by Kubeflow. Kubeflow cross-site scripting vulnerability , the vulnerability stems from the source parameter of the user-supplied data lack of effective filtering and escaping , an attacker can use this vulnerability to hijack the account through...
CVE-2023-6571
A cross-site scripting XSS vulnerability was found in kubeflow's presentation of pipeline cards. This issue may allow an attacker to trick a user into visiting a specially crafted link that could inject malicious HTML into the victim's browser. The highest threat from this vulnerability is to dat...
CVE-2023-6570
A Server-Side Request Forgery SSRF flaw was found in kubeflow. Any user can use kubeflow as a proxy to access internal or external resources and have the response returned to the user by supplying a url to the namespace parameter in /pipeline/artifacts/get. This issue could allow an attacker to...
CVE-2023-6570
Server-Side Request Forgery SSRF in kubeflow/kubeflow...
CVE-2023-6571
Cross-site Scripting XSS - Reflected in kubeflow/kubeflow...
Server side request forgery (ssrf)
Server-Side Request Forgery SSRF in kubeflow/kubeflow...
Cross site scripting
Cross-site Scripting XSS - Reflected in kubeflow/kubeflow...
CVE-2023-6571 Cross-site Scripting (XSS) - Reflected in kubeflow/kubeflow
Cross-site Scripting XSS - Reflected in kubeflow/kubeflow...
CVE-2023-6571 Cross-site Scripting (XSS) - Reflected in kubeflow/kubeflow
Cross-site Scripting XSS - Reflected in kubeflow/kubeflow...
CVE-2023-6571
CVE-2023-6571 is a reflected Cross-site Scripting (XSS) vulnerability in Kubeflow (kubeflow/kubeflow) affecting the presentation of pipeline cards. Root cause per the provided CNVD/Red Hat entries is lack of proper filtering/escaping of the source parameter of user-supplied data, enabling injecti...