Skip to content
OpenAdvisories

Vendor

karmada-io

3 known vulnerabilities.

2 results · Clear filters · Feed

  • High 8.7

    Karmada Dashboard API Unauthorized Access Vulnerability

    Karmada Dashboard is a general-purpose, web-based control panel for Karmada which is a multi-cluster management project. Prior to version 0.2.0, there is an authentication bypass vulnerability in the Karmada Dashboard API. The backend API endpoints (e.g., /ap…

  • High 8.7

    Karmada PULL Mode Cluster Privilege Escalation

    Karmada is a Kubernetes management system that allows users to run cloud-native applications across multiple Kubernetes clusters and clouds. Prior to version 1.12.0, the PULL mode clusters registered with the `karmadactl register` command have excessive privi…