sealos vulnerabilities

2 known vulnerabilities in sealos from Labring. 2 are rated high or critical. Each entry lists the affected versions and the release that fixes it, where the vendor has published one.

Latest first

• 8.1 High severity

  sealos: Missing Authorization

  CVE-2023-36815Jul 3, 2023Labring

  Sealos is a Cloud Operating System designed for managing cloud-native applications. In version 4.2.0 and prior, there is a permission flaw in the Sealos billing system, which allows users to control the recharge resource account `sealos[.] io/v1/Payment`, resu

• 9.8 Critical severity

  sealos: Incorrect Authorization

  CVE-2023-33190Jun 29, 2023Labring

  Sealos is an open source cloud operating system distribution based on the Kubernetes kernel. In versions of Sealos prior to 4.2.1-rc4 an improper configuration of role based access control (RBAC) permissions resulted in an attacker being able to obtain cluster