CVE-2023-22479

KubePi is a modern Kubernetes panel. A session fixation attack allows an attacker to hijack a legitimate user session, versions 1.6.3 and below are susceptible. A patch will be released in version 1.6.4.

Score

CVSS 3.1 7.5 High

Status

Modified - security-advisories@github.com

Published

2023-01-10

Last modified

2025-03-10

Weaknesses

CWE-384

Affected products

• Kubepi (Fit2cloud)
• Kubepi (Kubeoperator)

References

• https://github.com/KubeOperator/KubePi/security/advisories/GHSA-v4w5-r2xc-7f8h