Skip to content
CVE PROGRAM SOURCE RECORD7.5 High

CVE-2023-22479

KubePi vulnerable to session fixation attack

Description

KubePi is a modern Kubernetes panel. A session fixation attack allows an attacker to hijack a legitimate user session, versions 1.6.3 and below are susceptible. A patch will be released in version 1.6.4.

Affected products

Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.

KubeOperator KubePi

  • <= 1.6.3affected

References