Kubepi Security Vulnerabilities and Issues — Kubepi CVE List

Lucene search

KubeoperatorKubepi

3 matches found

CVE•added 2023/01/04 4:15 p.m.•79 views

CVE-2023-22463

KubePi is a k8s panel. The jwt authentication function of KubePi through version 1.6.2 uses hard-coded Jwtsigkeys, resulting in the same Jwtsigkeys for all online projects. This means that an attacker can forge any jwt token to take over the administrator account of any online project. Furthermore,...

9.8CVSS9.5AI score0.89138EPSS

CVE•added 2023/01/14 1:15 a.m.•77 views

CVE-2023-22478

KubePi is a modern Kubernetes panel. The API interfaces with unauthorized entities and may leak sensitive information. This issue has been patched in version 1.6.4. There are currently no known workarounds.

7.5CVSS7.1AI score0.78028EPSS

CVE•added 2023/01/10 9:15 p.m.•70 views

CVE-2023-22479

KubePi is a modern Kubernetes panel. A session fixation attack allows an attacker to hijack a legitimate user session, versions 1.6.3 and below are susceptible. A patch will be released in version 1.6.4.

7.5CVSS6.5AI score0.00091EPSS