CVE-2023-6570

CVE-2023-6570 describes a Server-Side Request Forgery (SSRF) in kubeflow/kubeflow. The Red Hat entry explains that any user can cause the Kubeflow server to proxy requests via the namespace parameter in /pipeline/artifacts/get, potentially hijacking a user session by stealing the authentication c...

Kubeflow 跨站脚本漏洞

Kubeflow is a cloud-native platform open-sourced by Kubeflow. Kubeflow cross-site scripting vulnerability , the vulnerability stems from the source parameter of the user-supplied data lack of effective filtering and escaping , an attacker can use this vulnerability to hijack the account through...

PT-2023-32698 · Kubeflow · Kubeflow

Name of the Vulnerable Software and Affected Versions: kubeflow/kubeflow affected versions not specified Description: The issue is related to Server-Side Request Forgery SSRF in kubeflow/kubeflow. No information is provided about the estimated number of potentially affected devices worldwide or...

PT-2023-32699 · Kubeflow · Kubeflow

Name of the Vulnerable Software and Affected Versions: kubeflow/kubeflow affected versions not specified Description: The issue is related to Cross-site Scripting XSS - Reflected. This means an attacker can inject malicious scripts into a website, which are then executed by the user's browser. No...

Kubeflow Code Issues Vulnerabilities

Kubeflow is a cloud-native platform open-sourced by Kubeflow. A code issue vulnerability exists in Kubeflow that stems from the fact that any user can use Kubeflow as a proxy to access internal and external resources and return the requested response to the user...

GHSA-H56G-GQ9V-VC8R vulnerabilities

Vulnerabilities for packages: kubeflow-pipelines-visualization-server...

GHSA-H56G-GQ9V-VC8R vulnerabilities

Vulnerabilities for packages: kubeflow-pipelines-visualization-server...

CVE-2023-49080 vulnerabilities

Vulnerabilities for packages: kubeflow-pipelines-visualization-server...

CVE-2023-49080 vulnerabilities

Vulnerabilities for packages: kubeflow-pipelines-visualization-server...

GHSA-Q78C-GWQW-JCMC vulnerabilities

Vulnerabilities for packages: aws-efs-csi-driver, kubeflow-pipelines...

CVE-2023-3955 vulnerabilities

Vulnerabilities for packages: kubeflow-pipelines, aws-efs-csi-driver, aws-efs-csi-driver-fips...

CVE-2023-3955 vulnerabilities

Vulnerabilities for packages: aws-efs-csi-driver, kubeflow-pipelines...

GHSA-M425-MQ94-257G vulnerabilities

Vulnerabilities for packages: kubernetes-csi-livenessprobe-fips, metrics-server-fips, bank-vaults-fips, falcoctl-fips, kubeflow-fips, kubescape, scorecard, kubevela, prometheus-stackdriver-exporter, slsa-verifier, aactl, dgraph, kiam, terraform-provider-sendgrid, volume-modifier-for-k8s-fips,...

GHSA-M425-MQ94-257G vulnerabilities

Vulnerabilities for packages: terraform-provider-sendgrid, up, spark-operator, slsa-verifier, dgraph, cortex, kubescape, k3d, aactl, kubevela, scorecard, kubeflow, src, buildkitd...

CVE-2023-46136 vulnerabilities

Vulnerabilities for packages: py3-werkzeug, kubeflow-volumes-web-app, airflow, kubeflow-pipelines-visualization-server, kubeflow-jupyter-web-app, py3-tensorflow-serving-api...

CVE-2023-46136 vulnerabilities

Vulnerabilities for packages: kubeflow-pipelines-visualization-server, airflow-core, airflow, kubeflow-volumes-web-app, py3-werkzeug, kubeflow-jupyter-web-app, py3-tensorflow-serving-api...

GHSA-HRFV-MQP8-Q5RW vulnerabilities

Vulnerabilities for packages: kubeflow-pipelines-visualization-server, airflow-core, airflow, kubeflow-volumes-web-app, py3-werkzeug, kubeflow-jupyter-web-app, py3-tensorflow-serving-api...

GHSA-HRFV-MQP8-Q5RW vulnerabilities

Vulnerabilities for packages: py3-werkzeug, kubeflow-volumes-web-app, airflow, kubeflow-pipelines-visualization-server, kubeflow-jupyter-web-app, py3-tensorflow-serving-api...

GHSA-G4MX-Q9VG-27P4 vulnerabilities

Vulnerabilities for packages: kubeflow-volumes-web-app, az, py3-tensorflow-serving-api, kubeflow-jupyter-web-app, py3-cassandra-medusa, jwt-tool, py3-pipenv, kubeflow-katib...

GHSA-G4MX-Q9VG-27P4 vulnerabilities

Vulnerabilities for packages: kubeflow-katib, py3-tensorflow-serving-api, jwt-tool, kubeflow-volumes-web-app, py3-cassandra-medusa, py3.13-scanner-test-libraries, k8s-sidecar, az, kubeflow-jupyter-web-app, request-1276, py3-pipenv, nvidia-nsight-compute-13.1, nvidia-nsight-compute-13.2...