1panel-dev Kubepi vulnerabilities
- 1panel-dev kubepi KubePi: Unauthenticated SSO/OIDC configuration allows admin account takeover and SSRF 10.0 Critical
- 1panel-dev kubepi KubePi: Insufficient per-cluster authorization checks in cluster management APIs 5.8 Medium
- 1panel-dev kubepi KubePi's JWT token validation has a defect 6.3 Medium
- 1panel-dev kubepi Leak password hash of any user 6.5 Medium
- 1panel-dev kubepi Privilege Escalation in kubepi 9.1 Critical
- 1panel-dev kubepi KubePi vulnerable to session fixation attack 7.5 High
- 1panel-dev kubepi KubePi is vulnerable to missing authorization 7.3 High
- 1panel-dev kubepi KubePi's Hardcoded Jwtsigkeys allows malicious actor to login with a forged JWT token 9.8 Critical