mfa

Jan 11, 2023 GO-2023-1956 +1 more

  GO-2023-1956: KubePi Privilege Escalation vulnerability in github.com/KubeOperator/kubepi

  GO-2023-1957: KubePi may leak password hash of any user in github.com/KubeOperator/kubepi

Jan 4, 2023 GO-2023-1463 +3 more

  GO-2023-1463: KubePi may allow unauthorized access to system API in github.com/KubeOperator/kubepi

  GO-2023-1468: KubePi session fixation attack allows an attacker to hijack a legitimate user session. in github.com/KubeOperator/kubepi

  GO-2023-1956: KubePi Privilege Escalation vulnerability in github.com/KubeOperator/kubepi

  GO-2023-1957: KubePi may leak password hash of any user in github.com/KubeOperator/kubepi

Nov 15, 2022 GO-2023-1283 +4 more

  GO-2023-1283: KubePi allows malicious actor to login with a forged JWT token via Hardcoded Jwtsigkeys in github.com/KubeOperator/kubepi

  GO-2023-1463: KubePi may allow unauthorized access to system API in github.com/KubeOperator/kubepi

  GO-2023-1468: KubePi session fixation attack allows an attacker to hijack a legitimate user session. in github.com/KubeOperator/kubepi

  GO-2023-1956: KubePi Privilege Escalation vulnerability in github.com/KubeOperator/kubepi

  GO-2023-1957: KubePi may leak password hash of any user in github.com/KubeOperator/kubepi

Jul 29, 2022 GO-2023-1283 +4 more

  GO-2023-1283: KubePi allows malicious actor to login with a forged JWT token via Hardcoded Jwtsigkeys in github.com/KubeOperator/kubepi

  GO-2023-1463: KubePi may allow unauthorized access to system API in github.com/KubeOperator/kubepi

  GO-2023-1468: KubePi session fixation attack allows an attacker to hijack a legitimate user session. in github.com/KubeOperator/kubepi

  GO-2023-1956: KubePi Privilege Escalation vulnerability in github.com/KubeOperator/kubepi

  GO-2023-1957: KubePi may leak password hash of any user in github.com/KubeOperator/kubepi

Jul 21, 2022 GO-2023-1283 +4 more

  GO-2023-1283: KubePi allows malicious actor to login with a forged JWT token via Hardcoded Jwtsigkeys in github.com/KubeOperator/kubepi

  GO-2023-1463: KubePi may allow unauthorized access to system API in github.com/KubeOperator/kubepi

  GO-2023-1468: KubePi session fixation attack allows an attacker to hijack a legitimate user session. in github.com/KubeOperator/kubepi

  GO-2023-1956: KubePi Privilege Escalation vulnerability in github.com/KubeOperator/kubepi

  GO-2023-1957: KubePi may leak password hash of any user in github.com/KubeOperator/kubepi

Jun 15, 2022 GO-2023-1283 +4 more

  GO-2023-1283: KubePi allows malicious actor to login with a forged JWT token via Hardcoded Jwtsigkeys in github.com/KubeOperator/kubepi

  GO-2023-1463: KubePi may allow unauthorized access to system API in github.com/KubeOperator/kubepi

  GO-2023-1468: KubePi session fixation attack allows an attacker to hijack a legitimate user session. in github.com/KubeOperator/kubepi

  GO-2023-1956: KubePi Privilege Escalation vulnerability in github.com/KubeOperator/kubepi

  GO-2023-1957: KubePi may leak password hash of any user in github.com/KubeOperator/kubepi

May 30, 2022 GO-2023-1283 +4 more

  GO-2023-1283: KubePi allows malicious actor to login with a forged JWT token via Hardcoded Jwtsigkeys in github.com/KubeOperator/kubepi

  GO-2023-1463: KubePi may allow unauthorized access to system API in github.com/KubeOperator/kubepi

  GO-2023-1468: KubePi session fixation attack allows an attacker to hijack a legitimate user session. in github.com/KubeOperator/kubepi

  GO-2023-1956: KubePi Privilege Escalation vulnerability in github.com/KubeOperator/kubepi

  GO-2023-1957: KubePi may leak password hash of any user in github.com/KubeOperator/kubepi

May 27, 2022 GO-2023-1283 +4 more

  GO-2023-1283: KubePi allows malicious actor to login with a forged JWT token via Hardcoded Jwtsigkeys in github.com/KubeOperator/kubepi

  GO-2023-1463: KubePi may allow unauthorized access to system API in github.com/KubeOperator/kubepi

  GO-2023-1468: KubePi session fixation attack allows an attacker to hijack a legitimate user session. in github.com/KubeOperator/kubepi

  GO-2023-1956: KubePi Privilege Escalation vulnerability in github.com/KubeOperator/kubepi

  GO-2023-1957: KubePi may leak password hash of any user in github.com/KubeOperator/kubepi

May 25, 2022 GO-2023-1283 +4 more

  GO-2023-1283: KubePi allows malicious actor to login with a forged JWT token via Hardcoded Jwtsigkeys in github.com/KubeOperator/kubepi

  GO-2023-1463: KubePi may allow unauthorized access to system API in github.com/KubeOperator/kubepi

  GO-2023-1468: KubePi session fixation attack allows an attacker to hijack a legitimate user session. in github.com/KubeOperator/kubepi

  GO-2023-1956: KubePi Privilege Escalation vulnerability in github.com/KubeOperator/kubepi

  GO-2023-1957: KubePi may leak password hash of any user in github.com/KubeOperator/kubepi

Changes in this version

+ func ValidCode(code string, secret string) bool

+ type Otp struct

+ QrImage string

+ Secret string

+ func GetOtp(username string) (otp Otp, err error)