CVE-2023-22479 — KubePi vulnerable to session fixation attack
KubePi is a modern Kubernetes panel. A session fixation attack allows an attacker to hijack a legitimate user session, versions 1.6.3 and below are susceptible. A patch will be …
Published: 2023-01-10 · CVSS: 7.5 · CVSS 3.1
KubePi is a modern Kubernetes panel. A session fixation attack allows an attacker to hijack a legitimate user session, versions 1.6.3 and below are susceptible. A patch will be released in version 1.6.4.
Source: CVE Program · Revision 8b16575c39f1e1810c5e863010da073d2d3285e7