flyteadmin vulnerabilities

2 known vulnerabilities in flyteadmin from Flyteorg. 2 are rated high or critical. Each entry lists the affected versions and the release that fixes it, where the vendor has published one.

Latest first

• 8.8 High severity

  flyteadmin: Improper Neutralization of Special Elements used in an SQL Command

  CVE-2023-41891Oct 30, 2023FlyteorgEPSS 1.06%

  FlyteAdmin is the control plane for Flyte responsible for managing entities and administering workflow executions. Prior to version 1.1.124, list endpoints on FlyteAdmin have a SQL vulnerability where a malicious user can send a REST request with custom SQL st

• 7.5 High severity

  flyteadmin: Use of Hard-coded Credentials

  CVE-2022-39273Oct 6, 2022Flyteorg

  FlyteAdmin is the control plane for the data processing platform Flyte. Users who enable the default Flyte’s authorization server without changing the default clientid hashes will be exposed to the public internet. In an effort to make enabling authentication