KubePi is a modern Kubernetes panel. A session fixation attack allows an attacker to hijack a legitimate user session, versions 1.6.3 and below are su...
fit2cloud Vulnerability Advisory Catalog
Total 77 security vulnerabilities recorded for fit2cloud software and firmware.
CVE-2023-22479
HIGH
Component: kubepi
📅 2023-01-10
CVSS 7.5
Dossier →
CVE-2023-22463
CRITICAL
Component: kubepi
KubePi is a k8s panel. The jwt authentication function of KubePi through version 1.6.2 uses hard-coded Jwtsigkeys, resulting in the same Jwtsigkeys fo...
📅 2023-01-04
CVSS 9.8
Dossier →
CVE-2022-28074
MEDIUM
Component: halo
Halo-1.5.0 was discovered to contain a stored cross-site scripting (XSS) vulnerability via \admin\index.html#/system/tools....
📅 2022-04-22
CVSS 4.8
Dossier →
CVE-2022-22124
MEDIUM
Component: halo
In Halo, versions v1.0.0 to v1.4.17 (latest) are vulnerable to Stored Cross-Site Scripting (XSS) in the profile image. An authenticated attacker can u...
📅 2022-01-13
CVSS 5.4
Dossier →
CVE-2022-22123
MEDIUM
Component: halo
In Halo, versions v1.0.0 to v1.4.17 (latest) are vulnerable to Stored Cross-Site Scripting (XSS) in the article title. An authenticated attacker can i...
📅 2022-01-13
CVSS 5.4
Dossier →
Page 4 of 4 (77 Total Records)