github.com/projectcapsule/capsule-proxy

2 known vulnerabilities.

All Critical High Medium Low Exploited only Public exploit

1 result · Clear filters · Feed

Critical 9.8

CVE-2023-48312

Authentication bypass using an empty token in capsule-proxy

capsule-proxy is a reverse proxy for the capsule operator project. Affected versions are subject to a privilege escalation vulnerability which is based on a missing check if the user is authenticated based on the `TokenReview` result. All the clusters running…

projectcapsule capsule-proxy github.com/clastix/capsule-proxy github.com/projectcapsule/capsule-proxy Go

Nov 24, 2023