Lucene search
GoogleOSV:CVE-2023-22479HistoryJan 10, 2023 - 9:15 p.m.
CVE-2023-22479
2023-01-1021:15:12
Google
osv.dev
6
kubernetes
panel
session fixation
attacker
hijack
legitimate user
patch
version 1.6.4
CVSS3
7.5
Attack Vector
NETWORK
Attack Complexity
HIGH
Privileges Required
NONE
User Interaction
REQUIRED
Scope
UNCHANGED
Confidentiality Impact
HIGH
Integrity Impact
HIGH
Availability Impact
HIGH
CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H
EPSS
0.001
Percentile
31.2%
KubePi is a modern Kubernetes panel. A session fixation attack allows an attacker to hijack a legitimate user session, versions 1.6.3 and below are susceptible. A patch will be released in version 1.6.4.
Related
cve
cve
CVE-2023-22479
2023-01-10 21:15:12
cvelist
cvelist
CVE-2023-22479 KubePi vulnerable to session fixation attack
2023-01-10 20:34:08
prion
prion
Session fixation
2023-01-10 21:15:00
veracode
veracode
Session Fixation
2023-01-19 04:54:45
gitlab
gitlab
Session Fixation
2023-01-10 00:00:00
Session Fixation
2023-01-10 00:00:00
Duplicate of ./go/github.com/KubeOperator/KubePi/CVE-2023-22479.yml
2023-01-09 00:00:00
github
github
osv
osv
nvd
nvd
CVE-2023-22479
2023-01-10 21:15:12
CVSS3
7.5
Attack Vector
NETWORK
Attack Complexity
HIGH
Privileges Required
NONE
User Interaction
REQUIRED
Scope
UNCHANGED
Confidentiality Impact
HIGH
Integrity Impact
HIGH
Availability Impact
HIGH
CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H
EPSS
0.001
Percentile
31.2%
Related for OSV:CVE-2023-22479