GO-2023-1957

vendorUSosv

KubePi may leak password hash of any user in github.com/KubeOperator/kubepi

view advisory published 2024-08-20Licence: per source

KubePi may leak password hash of any user in github.com/KubeOperator/kubepi

01

describes (1)

Related CVEs.

IDseverity exploitable
CVE-2023-37916UShigh7.5—
KubePi is an opensource kubernetes management panel. The endpoint /kubepi/api/v1/users/search?pageNum=1&&pageSize=10 leak password hash of any user (including admin). A sufficientl…
02

references

External citations — patches, advisories, analysis.

scry

Advisories like this name the exposed products attackers go after on your perimeter. See what is exposed on your perimeter with a free passive scan.

Free scan