Affected by GO-2023-1283 and 4 other vulnerabilities

GO-2023-1283: KubePi allows malicious actor to login with a forged JWT token via Hardcoded Jwtsigkeys in github.com/KubeOperator/kubepi

GO-2023-1463: KubePi may allow unauthorized access to system API in github.com/KubeOperator/kubepi

GO-2023-1468: KubePi session fixation attack allows an attacker to hijack a legitimate user session. in github.com/KubeOperator/kubepi

GO-2023-1956: KubePi Privilege Escalation vulnerability in github.com/KubeOperator/kubepi

GO-2023-1957: KubePi may leak password hash of any user in github.com/KubeOperator/kubepi

user

package

v1.0.0 Latest Latest Go to latest Published: Sep 13, 2021 License: Apache-2.0 Imports: 1 Imported by: 0

Details

Valid go.mod file

The Go module system was introduced in Go 1.11 and is the official dependency management solution for Go.
Redistributable license

Redistributable licenses place minimal restrictions on how software can be used, modified, and redistributed.
Tagged version

Modules with tagged versions give importers more predictable builds.
Stable version

When a project reaches major version v1 it is considered stable.
Learn more about best practices

Repository

github.com/KubeOperator/kubepi

Links

Open Source Insights

Documentation ¶

Constants ¶

This section is empty.

Variables ¶

This section is empty.

Functions ¶

This section is empty.

Types ¶

type Authenticate ¶

type Authenticate struct {
	Password string `json:"password"`
	Token    string `json:"token"`
}

type User ¶

type User struct {
	v1.BaseModel `storm:"inline"`
	v1.Metadata  `storm:"inline"`
	NickName     string       `json:"nickName" storm:"index"`
	Email        string       `json:"email" storm:"unique"`
	Language     string       `json:"language"`
	IsAdmin      bool         `json:"isAdmin"`
	Authenticate Authenticate `json:"authenticate"`
}

Source Files ¶

View all Source files

user.go

?	: This menu
/	: Search site
f or F	: Jump to
y or Y	: Canonical URL