Flyteorg vulnerabilities
We track 3 vulnerabilities in Flyteorg products across 2 products. 3 are rated high or critical, and none are known to be exploited. The most recent was published on October 30, 2023.
Latest Flyteorg vulnerabilities
- 8.8 High severity
flyteadmin: Improper Neutralization of Special Elements used in an SQL Command
FlyteAdmin is the control plane for Flyte responsible for managing entities and administering workflow executions. Prior to version 1.1.124, list endpoints on FlyteAdmin have a SQL vulnerability where a malicious user can send a REST request with custom SQL st
- 7.5 High severity
flyteadmin: Use of Hard-coded Credentials
FlyteAdmin is the control plane for the data processing platform Flyte. Users who enable the default Flyte’s authorization server without changing the default clientid hashes will be exposed to the public internet. In an effort to make enabling authentication
- 7.5 High severity
flyteconsole: Server-Side Request Forgery
FlyteConsole is the web user interface for the Flyte platform. FlyteConsole prior to version 0.52.0 is vulnerable to server-side request forgery (SSRF) when FlyteConsole is open to the general internet. An attacker can exploit any user of a vulnerable instance