Skip to content
OpenAdvisories

Package · Go

github.com/KubeOperator/kubepi

5 known vulnerabilities.

1 result · Clear filters · Feed

  • Medium 6.5

    Leak password hash of any user

    KubePi is an opensource kubernetes management panel. The endpoint /kubepi/api/v1/users/search?pageNum=1&&pageSize=10 leak password hash of any user (including admin). A sufficiently motivated attacker may be able to crack leaded password hashes. This issue ha…