Skip to content
OpenAdvisories

Vendor

KubeOperator

4 known vulnerabilities.

Products

KubePi 3 KubeOperator 1
All Critical High Medium Low Exploited only Public exploit

1 result · Clear filters · Feed

  • Critical 9.8
    CVE-2023-22463 Scanner template EPSS 70%

    KubePi's Hardcoded Jwtsigkeys allows malicious actor to login with a forged JWT token

    KubePi is a k8s panel. The jwt authentication function of KubePi through version 1.6.2 uses hard-coded Jwtsigkeys, resulting in the same Jwtsigkeys for all online projects. This means that an attacker can forge any jwt token to take over the administrator acc…

    KubeOperator KubePi github.com/KubeOperator/kubepi Go