CVE-2023-22478CWE-862

KubePi is vulnerable to missing authorization

High · published January 14, 2023

CVSS v3.1
7.3
EPSS
4%
Percentile
89.3
In the wild
Unconfirmed
What it is

KubePi is a modern Kubernetes panel. The API interfaces with unauthorized entities and may leak sensitive information. This issue has been patched in version 1.6.4. There are currently no known workarounds.

The record
Technical detail
CVSS v3.1
7.3 · HIGH
Vector
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:L
CVSS v4.0
Not supplied
EPSS
0.03573 · 89.3th percentile
Weakness
CWE-862 · Missing Authorization
Published
2023-01-14T00:22Z
EPSS history
Timeline
  • 14 JAN 00:22Z
    KubePi is vulnerable to missing authorization
    cvelistv5