Skip to content
OpenAdvisories

Package · Go

github.com/KubeOperator/kubepi

5 known vulnerabilities.

All Critical High Medium Low Exploited only Public exploit

2 results · Clear filters · Feed

  • Critical 9.1
    CVE-2023-37917

    Privilege Escalation in kubepi

    KubePi is an opensource kubernetes management panel. A normal user has permission to create/update users, they can become admin by editing the `isadmin` value in the request. As a result any user may take administrative control of KubePi. This issue has been …

    1Panel-dev KubePi github.com/KubeOperator/kubepi Go
  • Critical 9.8
    CVE-2023-22463 Scanner template EPSS 70%

    KubePi's Hardcoded Jwtsigkeys allows malicious actor to login with a forged JWT token

    KubePi is a k8s panel. The jwt authentication function of KubePi through version 1.6.2 uses hard-coded Jwtsigkeys, resulting in the same Jwtsigkeys for all online projects. This means that an attacker can forge any jwt token to take over the administrator acc…

    KubeOperator KubePi github.com/KubeOperator/kubepi Go