Skip to content
OpenAdvisories

Product · OpsTree Solutions

BuildPiper

9 known vulnerabilities.

3 results · Clear filters · Feed

  • High 7.1

    OpsTree BuildPiper before 2.7.0 contains a path traversal vulnerability that allows authenticated users to read arbitra…

  • High 7.1

    OpsTree BuildPiper before 2.7.0 Authorization Bypass via Environment Creation API

    OpsTree BuildPiper before 2.7.0 contains an authorization bypass vulnerability that allows authenticated users to create environments on unassigned Kubernetes clusters by tampering with cluster_id and namespaces values. Attackers can modify requests to POST /…

  • High 7.1

    OpsTree BuildPiper before 2.7.0 contains an authorization bypass vulnerability that allows authenticated users to attac…