Product by 1Panel-dev
KubeOperator KubePi
5 known vulnerabilities in KubeOperator KubePi (1Panel-dev), 0 of them actively exploited (CISA KEV).
Key figures
5
Vulnerabilities
0
Actively exploited (KEV)
0
Used by ransomware
2
Critical
Vulnerabilities
Actively exploited vulnerabilities (CISA KEV) first, then by priority. Click a column header to re-sort the table.
| Critical | CVE-2023-22463 | KubePi's Hardcoded Jwtsigkeys allows malicious actor to login with a forged JWT token | 9.8 | |
| High | CVE-2023-22478 | KubePi is vulnerable to missing authorization | 7.3 | |
| Critical | CVE-2023-37917 | Privilege Escalation in kubepi | 9.1 | |
| High | CVE-2023-37916 | Leak password hash of any user | 6.5 | |
| High | CVE-2023-22479 | KubePi vulnerable to session fixation attack | 7.5 |