Lucene search
Https://gitlab.com/gitlab-org/security-products/gemnasium-dbGITLAB-E8DB41926D58E11B8CC30BDC4BD98561HistoryJan 10, 2023 - 12:00 a.m.
Session Fixation
2023-01-1000:00:00
https://gitlab.com/gitlab-org/security-products/gemnasium-db
gitlab.com
5
kubepi
session fixation
attack
versions 1.6.3
patch
1.6.4
software
CVSS3
7.5
Attack Vector
NETWORK
Attack Complexity
HIGH
Privileges Required
NONE
User Interaction
REQUIRED
Scope
UNCHANGED
Confidentiality Impact
HIGH
Integrity Impact
HIGH
Availability Impact
HIGH
CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H
AI Score
6.6
Confidence
Low
EPSS
0.001
Percentile
31.2%
KubePi is a modern Kubernetes panel. A session fixation attack allows an attacker to hijack a legitimate user session, versions 1.6.3 and below are susceptible. A patch will be released in version 1.6.4.
Affected configurations
Node
gokubepiRange<v1.6.4
Related
osv
osv
CVE-2023-22479
2023-01-10 21:15:12
cve
cve
CVE-2023-22479
2023-01-10 21:15:12
cvelist
cvelist
CVE-2023-22479 KubePi vulnerable to session fixation attack
2023-01-10 20:34:08
prion
prion
Session fixation
2023-01-10 21:15:00
veracode
veracode
Session Fixation
2023-01-19 04:54:45
github
github
gitlab
gitlab
Session Fixation
2023-01-10 00:00:00
Duplicate of ./go/github.com/KubeOperator/KubePi/CVE-2023-22479.yml
2023-01-09 00:00:00
nvd
nvd
CVE-2023-22479
2023-01-10 21:15:12
CVSS3
7.5
Attack Vector
NETWORK
Attack Complexity
HIGH
Privileges Required
NONE
User Interaction
REQUIRED
Scope
UNCHANGED
Confidentiality Impact
HIGH
Integrity Impact
HIGH
Availability Impact
HIGH
CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H
AI Score
6.6
Confidence
Low
EPSS
0.001
Percentile
31.2%
Related for GITLAB-E8DB41926D58E11B8CC30BDC4BD98561