CVE-2023-22478

high

Description

KubePi is a modern Kubernetes panel. The API interfaces with unauthorized entities and may leak sensitive information. This issue has been patched in version 1.6.4. There are currently no known workarounds.

References

Advisories

https://github.com/KubeOperator/KubePi/security/advisories/GHSA-gqx8-hxmv-c4v4

https://github.com/KubeOperator/KubePi/releases/tag/v1.6.4

https://github.com/KubeOperator/KubePi/commit/0c6774bf5d9003ae4d60257a3f207c131ff4a6d6

Details

Source: Mitre, NVD

Published: 2023-01-14

Updated: 2026-06-17

Risk Information

CVSS v2

Base Score: 7.8

Vector: CVSS2#AV:N/AC:L/Au:N/C:C/I:N/A:N

Severity: High

CVSS v3

Base Score: 7.5

Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N