https://cve.radiocsirt.org Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Sat, 03 Oct 2026 20:16:54 +0000 https://cve.radiocsirt.org/vuln/cnvd-2020-23222 cnvd-2020-23222 https://cve.radiocsirt.org/vuln/cnvd-2020-23222 https://cve.radiocsirt.org/vuln/euvd-2026-35625 EUVD-2026-35625 https://cve.radiocsirt.org/vuln/euvd-2026-35625 https://cve.radiocsirt.org/vuln/fkie_cve-2020-1762 <p>An insufficient JWT validation vulnerability was found in Kiali versions 0.4.0 to 1.15.0 and was fixed in Kiali version 1.15.1, wherein a remote attacker could abuse this flaw by stealing a valid JWT cookie and using that to spoof a user session, possibly gaining privileges to view and alter the Istio configuration.</p> <p>An insufficient JWT validation vulnerability was found in Kiali versions 0.4.0 to 1.15.0 and was fixed in Kiali version 1.15.1, wherein a remote attacker could abuse this flaw by stealing a valid JWT cookie and using that to spoof a user session, possibly gaining privileges to view and alter the Istio configuration.</p> https://cve.radiocsirt.org/vuln/fkie_cve-2020-1762 https://cve.radiocsirt.org/vuln/ghsa-465w-gg5p-85c9 <p><strong>Affected:</strong> Go: github.com/kiali/kiali</p> <p>An insufficient JWT validation vulnerability was found in Kiali versions 0.4.0 to 1.15.0 and was fixed in Kiali version 1.15.1, wherein a remote attacker could abuse this flaw by stealing a valid JWT cookie and using that to spoof a user session, possibly gaining privileges to view and alter the Istio configuration.</p> <p><strong>Affected:</strong> Go: github.com/kiali/kiali</p> <p>An insufficient JWT validation vulnerability was found in Kiali versions 0.4.0 to 1.15.0 and was fixed in Kiali version 1.15.1, wherein a remote attacker could abuse this flaw by stealing a valid JWT cookie and using that to spoof a user session, possibly gaining privileges to view and alter the Istio configuration.</p> https://cve.radiocsirt.org/vuln/ghsa-465w-gg5p-85c9 https://cve.radiocsirt.org/vuln/gsd-2020-1762 gsd-2020-1762 https://cve.radiocsirt.org/vuln/gsd-2020-1762 https://cve.radiocsirt.org/vuln/rhsa-2020:0972 <p>kiali: ignoring JWT claim fields npmjs-url-parse: Improper validation of protocol of the returned URL</p> <p>kiali: ignoring JWT claim fields npmjs-url-parse: Improper validation of protocol of the returned URL</p> https://cve.radiocsirt.org/vuln/rhsa-2020:0972