GO-2023-1956

vendorUSosv

KubePi Privilege Escalation vulnerability in github.com/KubeOperator/kubepi

view advisory published 2024-08-20Licence: per source

KubePi Privilege Escalation vulnerability in github.com/KubeOperator/kubepi

01

describes (1)

Related CVEs.

IDseverity exploitable
CVE-2023-37917UShigh8.8—
KubePi is an opensource kubernetes management panel. A normal user has permission to create/update users, they can become admin by editing the `isadmin` value in the request. As a…
02

references

External citations — patches, advisories, analysis.

scry

Advisories like this name the exposed products attackers go after on your perimeter. See what is exposed on your perimeter with a free passive scan.

Free scan