Affected by GO-2023-1283
and 4 other vulnerabilities
GO-2023-1283: KubePi allows malicious actor to login with a forged JWT token via Hardcoded Jwtsigkeys in github.com/KubeOperator/kubepi
GO-2023-1463: KubePi may allow unauthorized access to system API in github.com/KubeOperator/kubepi
GO-2023-1468: KubePi session fixation attack allows an attacker to hijack a legitimate user session. in github.com/KubeOperator/kubepi
GO-2023-1956: KubePi Privilege Escalation vulnerability in github.com/KubeOperator/kubepi
GO-2023-1957: KubePi may leak password hash of any user in github.com/KubeOperator/kubepi
package
Version:
v1.4.1
Opens a new window with list of versions in this module.
Published: Feb 14, 2022
License: Apache-2.0
Opens a new window with license information.
Imports: 1
Opens a new window with list of imports.
Imported by: 0
Opens a new window with list of known importers.
Documentation
¶
type Authentication struct {
Mode string `json:"mode"`
BearerToken string `json:"bearerToken"`
Certificate Certificate `json:"certificate" storm:"inline"`
ConfigFileContent []byte `json:"configFileContent"`
}
type Binding struct {
v1.BaseModel `storm:"inline"`
v1.Metadata `storm:"inline"`
UserRef string `json:"UserRef" storm:"inline"`
ClusterRef string `json:"clusterRef" storm:"index"`
Certificate []byte `json:"certificate"`
}
type Certificate struct {
KeyData []byte `json:"keyData"`
CertData []byte `json:"certData"`
}
type Cluster struct {
v1.BaseModel `storm:"inline"`
v1.Metadata `storm:"inline"`
CaCertificate Certificate `json:"caCertificate" storm:"inline"`
Spec Spec `json:"spec" storm:"inline"`
PrivateKey []byte `json:"privateKey"`
Status Status `json:"status" storm:"inline"`
Labels []string `json:"labels"`
}
type Connect struct {
Direction string `json:"direction"`
Forward Forward `json:"forward" storm:"inline"`
}
type Forward struct {
ApiServer string `json:"apiServer"`
Proxy Proxy `json:"proxy" storm:"inline"`
}
type Proxy struct {
URL string `json:"url"`
Username string `json:"username"`
Password string `json:"password"`
}
type Spec struct {
Connect Connect `json:"connect" storm:"inline"`
Authentication Authentication `json:"authentication" storm:"inline"`
Local bool `json:"local"`
}
type Status struct {
Version string `json:"version"`
Phase string `json:"phase"`
Message string `json:"message"`
}
Source Files
¶
Click to show internal directories.
Click to hide internal directories.