KubePi vulnerabilities

2 known vulnerabilities in KubePi from KubeOperator. 2 are rated high or critical. Each entry lists the affected versions and the release that fixes it, where the vendor has published one.

Latest first

• 7.5 High severity

  KubePi: Missing Authorization

  CVE-2023-22478Jan 14, 2023KubeOperatorEPSS 3.96%

  KubePi is a modern Kubernetes panel. The API interfaces with unauthorized entities and may leak sensitive information. This issue has been patched in version 1.6.4. There are currently no known workarounds.

• 9.8 Critical severity

  KubePi: Use of Hard-coded Credentials

  CVE-2023-22463Jan 4, 2023KubeOperatorEPSS 69.7%

  KubePi is a k8s panel. The jwt authentication function of KubePi through version 1.6.2 uses hard-coded Jwtsigkeys, resulting in the same Jwtsigkeys for all online projects. This means that an attacker can forge any jwt token to take over the administrator acco