Skip to content
OpenAdvisories

Package · Go

github.com/flyteorg/flyteadmin

3 known vulnerabilities.

All Critical High Medium Low Exploited only Public exploit

3 results · Feed

  • Low 3.5
    CVE-2023-41891

    FlyteAdmin SQL Injection in List Filters

    FlyteAdmin is the control plane for Flyte responsible for managing entities and administering workflow executions. Prior to version 1.1.124, list endpoints on FlyteAdmin have a SQL vulnerability where a malicious user can send a REST request with custom SQL s…

    flyteorg flyteadmin github.com/flyteorg/flyteadmin Go
  • Medium 4.8
    CVE-2022-39273

    Default OAuth Authorization Server secret in FlyteAdmin

    FlyteAdmin is the control plane for the data processing platform Flyte. Users who enable the default Flyte’s authorization server without changing the default clientid hashes will be exposed to the public internet. In an effort to make enabling authentication…

    flyteorg flyteadmin github.com/flyteorg/flyteadmin Go
  • Medium 6.5
    CVE-2022-31145

    Insufficient AccessToken Expiration Check in FlyteAdmin

    FlyteAdmin is the control plane for Flyte responsible for managing entities and administering workflow executions. In versions 1.1.30 and prior, authenticated users using an external identity provider can continue to use Access Tokens and ID Tokens even after…

    flyteorg flyteadmin github.com/flyteorg/flyteadmin Go