CVE-2023-22478 PoC — KubePi 安全漏洞

Source

https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2023/CVE-2023-22478.yaml

Associated Vulnerability

Title:KubePi 安全漏洞 (CVE-2023-22478)
Description:KubePi是一个K8s面板。它允许管理员导入多个Kubernetes集群，并且通过权限控制，将不同cluster、namespace的权限分配给指定用户。 KubePi 1.6.4之前版本存在安全漏洞，该漏洞源于API与未经授权的实体交互，可能会泄露敏感信息。

Description

KubePi is a modern Kubernetes panel. The API interfaces with unauthorized entities and may leak sensitive information. This issue has been patched in version 1.6.4. There are currently no known workarounds.

File Snapshot


 id: CVE-2023-22478

info:
  name: KubePi <= v1.6.4 LoginLogsSearch - Unauthorized Access
  author: D

...

Shenlong Bot has cached this for you

Remarks

1. It is advised to access via the original source first.

2. If the original source is unavailable, please email f.jinxu#gmail.com for a local snapshot (replace # with @).

3. Shenlong has snapshotted the POC code for you. To support long-term maintenance, please consider donating. Thank you for your support.

Goal Reached Thanks to every supporter — we hit 100%!