Kubepi Security Vulnerabilities and Issues — Kubepi CVE List

Lucene search

Fit2cloudKubepi

3 matches found

CVE•added 2023/07/21 9:15 p.m.•2493 views

CVE-2023-37916

KubePi is an opensource kubernetes management panel. The endpoint /kubepi/api/v1/users/search?pageNum=1&&pageSize=10 leak password hash of any user (including admin). A sufficiently motivated attacker may be able to crack leaded password hashes. This issue has been addressed in version 1.6.5. Users...

7.5CVSS6.8AI score0.00156EPSS

CVE•added 2023/01/14 1:15 a.m.•77 views

CVE-2023-22478

KubePi is a modern Kubernetes panel. The API interfaces with unauthorized entities and may leak sensitive information. This issue has been patched in version 1.6.4. There are currently no known workarounds.

7.5CVSS7.1AI score0.80623EPSS

CVE•added 2023/01/10 9:15 p.m.•70 views

CVE-2023-22479

KubePi is a modern Kubernetes panel. A session fixation attack allows an attacker to hijack a legitimate user session, versions 1.6.3 and below are susceptible. A patch will be released in version 1.6.4.

7.5CVSS6.5AI score0.00091EPSS