kubepi vulnerabilities

2 known vulnerabilities in kubepi from Fit2cloud. 2 are rated high or critical. Each entry lists the affected versions and the release that fixes it, where the vendor has published one.

Latest first

• 8.8 High severity

  KubePi: Improper Privilege Management

  CVE-2023-37917Jul 21, 20231Panel-dev

  KubePi is an opensource kubernetes management panel. A normal user has permission to create/update users, they can become admin by editing the `isadmin` value in the request. As a result any user may take administrative control of KubePi. This issue has been a

• 7.5 High severity

  KubePi: Exposure of Sensitive Information to an Unauthorized Actor

  CVE-2023-37916Jul 21, 20231Panel-dev

  KubePi is an opensource kubernetes management panel. The endpoint /kubepi/api/v1/users/search?pageNum=1&&pageSize=10 leak password hash of any user (including admin). A sufficiently motivated attacker may be able to crack leaded password hashes. This issue has