'; } else{ echo ''; } echo '
|
|
|||
| Rule General Information |
|---|
| Release Date: | 2026-08-13 | |
| Rule Name: | KubePi Unauthorized Login Logs Search Access Vulnerability (CVE-2023-22478) | |
| Severity: | ||
| CVE ID: | ||
| Rule Protection Details |
|---|
| Description: | KubePi is a modern Kubernetes panel. The API interfaces with unauthorized entities and may leak sensitive information. This issue has been patched in version 1.6.4. There are currently no known workarounds. | |
| Impact: | An attacker could exploit this vulnerability to have unspecified effect. | |
| Affected OS: | Windows, Linux, Others | |
| Reference: | https://github.com/KubeOperator/KubePi/commit/0c6774bf5d9003ae4d60257a3f207c131ff4a6d6 https://github.com/KubeOperator/KubePi/releases/tag/v1.6.4 https://github.com/KubeOperator/KubePi/security/advisories/GHSA-gqx8-hxmv-c4v4 |
|
| Solutions |
|---|
| Please refer to announcements or patches release by the vendor: https://github.com/KubeOperator/KubePi/releases/tag/v1.6.4 |