user

Jan 11, 2023 GO-2023-1956 +1 more

  GO-2023-1956: KubePi Privilege Escalation vulnerability in github.com/KubeOperator/kubepi

  GO-2023-1957: KubePi may leak password hash of any user in github.com/KubeOperator/kubepi

Jan 4, 2023 GO-2023-1463 +3 more

  GO-2023-1463: KubePi may allow unauthorized access to system API in github.com/KubeOperator/kubepi

  GO-2023-1468: KubePi session fixation attack allows an attacker to hijack a legitimate user session. in github.com/KubeOperator/kubepi

  GO-2023-1956: KubePi Privilege Escalation vulnerability in github.com/KubeOperator/kubepi

  GO-2023-1957: KubePi may leak password hash of any user in github.com/KubeOperator/kubepi

Nov 15, 2022 GO-2023-1283 +4 more

  GO-2023-1283: KubePi allows malicious actor to login with a forged JWT token via Hardcoded Jwtsigkeys in github.com/KubeOperator/kubepi

  GO-2023-1463: KubePi may allow unauthorized access to system API in github.com/KubeOperator/kubepi

  GO-2023-1468: KubePi session fixation attack allows an attacker to hijack a legitimate user session. in github.com/KubeOperator/kubepi

  GO-2023-1956: KubePi Privilege Escalation vulnerability in github.com/KubeOperator/kubepi

  GO-2023-1957: KubePi may leak password hash of any user in github.com/KubeOperator/kubepi

Jul 29, 2022 GO-2023-1283 +4 more

  GO-2023-1283: KubePi allows malicious actor to login with a forged JWT token via Hardcoded Jwtsigkeys in github.com/KubeOperator/kubepi

  GO-2023-1463: KubePi may allow unauthorized access to system API in github.com/KubeOperator/kubepi

  GO-2023-1468: KubePi session fixation attack allows an attacker to hijack a legitimate user session. in github.com/KubeOperator/kubepi

  GO-2023-1956: KubePi Privilege Escalation vulnerability in github.com/KubeOperator/kubepi

  GO-2023-1957: KubePi may leak password hash of any user in github.com/KubeOperator/kubepi

Jul 21, 2022 GO-2023-1283 +4 more

  GO-2023-1283: KubePi allows malicious actor to login with a forged JWT token via Hardcoded Jwtsigkeys in github.com/KubeOperator/kubepi

  GO-2023-1463: KubePi may allow unauthorized access to system API in github.com/KubeOperator/kubepi

  GO-2023-1468: KubePi session fixation attack allows an attacker to hijack a legitimate user session. in github.com/KubeOperator/kubepi

  GO-2023-1956: KubePi Privilege Escalation vulnerability in github.com/KubeOperator/kubepi

  GO-2023-1957: KubePi may leak password hash of any user in github.com/KubeOperator/kubepi

Jun 15, 2022 GO-2023-1283 +4 more

  GO-2023-1283: KubePi allows malicious actor to login with a forged JWT token via Hardcoded Jwtsigkeys in github.com/KubeOperator/kubepi

  GO-2023-1463: KubePi may allow unauthorized access to system API in github.com/KubeOperator/kubepi

  GO-2023-1468: KubePi session fixation attack allows an attacker to hijack a legitimate user session. in github.com/KubeOperator/kubepi

  GO-2023-1956: KubePi Privilege Escalation vulnerability in github.com/KubeOperator/kubepi

  GO-2023-1957: KubePi may leak password hash of any user in github.com/KubeOperator/kubepi

Changes in this version

+ type ImportResult struct

+ Failures []string

+ Msg string

+ Success bool

+ type ImportUser struct

+ Available bool

+ Email string

+ Name string

+ NickName string

May 30, 2022 GO-2023-1283 +4 more

  GO-2023-1283: KubePi allows malicious actor to login with a forged JWT token via Hardcoded Jwtsigkeys in github.com/KubeOperator/kubepi

  GO-2023-1463: KubePi may allow unauthorized access to system API in github.com/KubeOperator/kubepi

  GO-2023-1468: KubePi session fixation attack allows an attacker to hijack a legitimate user session. in github.com/KubeOperator/kubepi

  GO-2023-1956: KubePi Privilege Escalation vulnerability in github.com/KubeOperator/kubepi

  GO-2023-1957: KubePi may leak password hash of any user in github.com/KubeOperator/kubepi

May 27, 2022 GO-2023-1283 +4 more

  GO-2023-1283: KubePi allows malicious actor to login with a forged JWT token via Hardcoded Jwtsigkeys in github.com/KubeOperator/kubepi

  GO-2023-1463: KubePi may allow unauthorized access to system API in github.com/KubeOperator/kubepi

  GO-2023-1468: KubePi session fixation attack allows an attacker to hijack a legitimate user session. in github.com/KubeOperator/kubepi

  GO-2023-1956: KubePi Privilege Escalation vulnerability in github.com/KubeOperator/kubepi

  GO-2023-1957: KubePi may leak password hash of any user in github.com/KubeOperator/kubepi

May 25, 2022 GO-2023-1283 +4 more

  GO-2023-1283: KubePi allows malicious actor to login with a forged JWT token via Hardcoded Jwtsigkeys in github.com/KubeOperator/kubepi

  GO-2023-1463: KubePi may allow unauthorized access to system API in github.com/KubeOperator/kubepi

  GO-2023-1468: KubePi session fixation attack allows an attacker to hijack a legitimate user session. in github.com/KubeOperator/kubepi

  GO-2023-1956: KubePi Privilege Escalation vulnerability in github.com/KubeOperator/kubepi

  GO-2023-1957: KubePi may leak password hash of any user in github.com/KubeOperator/kubepi

Changes in this version

+ type Mfa struct

+ Enable bool

+ Secret string

type User

+ Mfa Mfa

Mar 7, 2022 GO-2023-1283 +4 more

  GO-2023-1283: KubePi allows malicious actor to login with a forged JWT token via Hardcoded Jwtsigkeys in github.com/KubeOperator/kubepi

  GO-2023-1463: KubePi may allow unauthorized access to system API in github.com/KubeOperator/kubepi

  GO-2023-1468: KubePi session fixation attack allows an attacker to hijack a legitimate user session. in github.com/KubeOperator/kubepi

  GO-2023-1956: KubePi Privilege Escalation vulnerability in github.com/KubeOperator/kubepi

  GO-2023-1957: KubePi may leak password hash of any user in github.com/KubeOperator/kubepi

Feb 14, 2022 GO-2023-1283 +4 more

  GO-2023-1283: KubePi allows malicious actor to login with a forged JWT token via Hardcoded Jwtsigkeys in github.com/KubeOperator/kubepi

  GO-2023-1463: KubePi may allow unauthorized access to system API in github.com/KubeOperator/kubepi

  GO-2023-1468: KubePi session fixation attack allows an attacker to hijack a legitimate user session. in github.com/KubeOperator/kubepi

  GO-2023-1956: KubePi Privilege Escalation vulnerability in github.com/KubeOperator/kubepi

  GO-2023-1957: KubePi may leak password hash of any user in github.com/KubeOperator/kubepi

Jan 12, 2022 GO-2023-1283 +4 more

  GO-2023-1283: KubePi allows malicious actor to login with a forged JWT token via Hardcoded Jwtsigkeys in github.com/KubeOperator/kubepi

  GO-2023-1463: KubePi may allow unauthorized access to system API in github.com/KubeOperator/kubepi

  GO-2023-1468: KubePi session fixation attack allows an attacker to hijack a legitimate user session. in github.com/KubeOperator/kubepi

  GO-2023-1956: KubePi Privilege Escalation vulnerability in github.com/KubeOperator/kubepi

  GO-2023-1957: KubePi may leak password hash of any user in github.com/KubeOperator/kubepi

Dec 8, 2021 GO-2023-1283 +4 more

  GO-2023-1283: KubePi allows malicious actor to login with a forged JWT token via Hardcoded Jwtsigkeys in github.com/KubeOperator/kubepi

  GO-2023-1463: KubePi may allow unauthorized access to system API in github.com/KubeOperator/kubepi

  GO-2023-1468: KubePi session fixation attack allows an attacker to hijack a legitimate user session. in github.com/KubeOperator/kubepi

  GO-2023-1956: KubePi Privilege Escalation vulnerability in github.com/KubeOperator/kubepi

  GO-2023-1957: KubePi may leak password hash of any user in github.com/KubeOperator/kubepi

Nov 23, 2021 GO-2023-1283 +4 more

  GO-2023-1283: KubePi allows malicious actor to login with a forged JWT token via Hardcoded Jwtsigkeys in github.com/KubeOperator/kubepi

  GO-2023-1463: KubePi may allow unauthorized access to system API in github.com/KubeOperator/kubepi

  GO-2023-1468: KubePi session fixation attack allows an attacker to hijack a legitimate user session. in github.com/KubeOperator/kubepi

  GO-2023-1956: KubePi Privilege Escalation vulnerability in github.com/KubeOperator/kubepi

  GO-2023-1957: KubePi may leak password hash of any user in github.com/KubeOperator/kubepi

Nov 15, 2021 GO-2023-1283 +4 more

  GO-2023-1283: KubePi allows malicious actor to login with a forged JWT token via Hardcoded Jwtsigkeys in github.com/KubeOperator/kubepi

  GO-2023-1463: KubePi may allow unauthorized access to system API in github.com/KubeOperator/kubepi

  GO-2023-1468: KubePi session fixation attack allows an attacker to hijack a legitimate user session. in github.com/KubeOperator/kubepi

  GO-2023-1956: KubePi Privilege Escalation vulnerability in github.com/KubeOperator/kubepi

  GO-2023-1957: KubePi may leak password hash of any user in github.com/KubeOperator/kubepi

Nov 9, 2021 GO-2023-1283 +4 more

  GO-2023-1283: KubePi allows malicious actor to login with a forged JWT token via Hardcoded Jwtsigkeys in github.com/KubeOperator/kubepi

  GO-2023-1463: KubePi may allow unauthorized access to system API in github.com/KubeOperator/kubepi

  GO-2023-1468: KubePi session fixation attack allows an attacker to hijack a legitimate user session. in github.com/KubeOperator/kubepi

  GO-2023-1956: KubePi Privilege Escalation vulnerability in github.com/KubeOperator/kubepi

  GO-2023-1957: KubePi may leak password hash of any user in github.com/KubeOperator/kubepi

Changes in this version

+ const LDAP

+ const LOCAL

type User

+ Type string

Oct 29, 2021 GO-2023-1283 +4 more

  GO-2023-1283: KubePi allows malicious actor to login with a forged JWT token via Hardcoded Jwtsigkeys in github.com/KubeOperator/kubepi

  GO-2023-1463: KubePi may allow unauthorized access to system API in github.com/KubeOperator/kubepi

  GO-2023-1468: KubePi session fixation attack allows an attacker to hijack a legitimate user session. in github.com/KubeOperator/kubepi

  GO-2023-1956: KubePi Privilege Escalation vulnerability in github.com/KubeOperator/kubepi

  GO-2023-1957: KubePi may leak password hash of any user in github.com/KubeOperator/kubepi

Oct 27, 2021 GO-2023-1283 +4 more

  GO-2023-1283: KubePi allows malicious actor to login with a forged JWT token via Hardcoded Jwtsigkeys in github.com/KubeOperator/kubepi

  GO-2023-1463: KubePi may allow unauthorized access to system API in github.com/KubeOperator/kubepi

  GO-2023-1468: KubePi session fixation attack allows an attacker to hijack a legitimate user session. in github.com/KubeOperator/kubepi

  GO-2023-1956: KubePi Privilege Escalation vulnerability in github.com/KubeOperator/kubepi

  GO-2023-1957: KubePi may leak password hash of any user in github.com/KubeOperator/kubepi

Oct 21, 2021 GO-2023-1283 +4 more

  GO-2023-1283: KubePi allows malicious actor to login with a forged JWT token via Hardcoded Jwtsigkeys in github.com/KubeOperator/kubepi

  GO-2023-1463: KubePi may allow unauthorized access to system API in github.com/KubeOperator/kubepi

  GO-2023-1468: KubePi session fixation attack allows an attacker to hijack a legitimate user session. in github.com/KubeOperator/kubepi

  GO-2023-1956: KubePi Privilege Escalation vulnerability in github.com/KubeOperator/kubepi

  GO-2023-1957: KubePi may leak password hash of any user in github.com/KubeOperator/kubepi

Sep 15, 2021 GO-2023-1283 +4 more

  GO-2023-1283: KubePi allows malicious actor to login with a forged JWT token via Hardcoded Jwtsigkeys in github.com/KubeOperator/kubepi

  GO-2023-1463: KubePi may allow unauthorized access to system API in github.com/KubeOperator/kubepi

  GO-2023-1468: KubePi session fixation attack allows an attacker to hijack a legitimate user session. in github.com/KubeOperator/kubepi

  GO-2023-1956: KubePi Privilege Escalation vulnerability in github.com/KubeOperator/kubepi

  GO-2023-1957: KubePi may leak password hash of any user in github.com/KubeOperator/kubepi

Sep 13, 2021 GO-2023-1283 +4 more

  GO-2023-1283: KubePi allows malicious actor to login with a forged JWT token via Hardcoded Jwtsigkeys in github.com/KubeOperator/kubepi

  GO-2023-1463: KubePi may allow unauthorized access to system API in github.com/KubeOperator/kubepi

  GO-2023-1468: KubePi session fixation attack allows an attacker to hijack a legitimate user session. in github.com/KubeOperator/kubepi

  GO-2023-1956: KubePi Privilege Escalation vulnerability in github.com/KubeOperator/kubepi

  GO-2023-1957: KubePi may leak password hash of any user in github.com/KubeOperator/kubepi

Changes in this version

+ type Authenticate struct

+ Password string

+ Token string

+ type User struct

+ Authenticate Authenticate

+ Email string

+ IsAdmin bool

+ Language string

+ NickName string