https://cve.radiocsirt.org Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Wed, 07 Oct 2026 17:10:29 +0000 https://cve.radiocsirt.org/vuln/euvd-2026-194931 EUVD-2026-194931 https://cve.radiocsirt.org/vuln/euvd-2026-194931 https://cve.radiocsirt.org/vuln/fkie_cve-2023-37917 <p>KubePi is an opensource kubernetes management panel. A normal user has permission to create/update users, they can become admin by editing the `isadmin` value in the request. As a result any user may take administrative control of KubePi. This issue has been addressed in version 1.6.5. Users are advised to upgrade. There are no known workarounds for this vulnerability.</p> <p>KubePi is an opensource kubernetes management panel. A normal user has permission to create/update users, they can become admin by editing the `isadmin` value in the request. As a result any user may take administrative control of KubePi. This issue has been addressed in version 1.6.5. Users are advised to upgrade. There are no known workarounds for this vulnerability.</p> https://cve.radiocsirt.org/vuln/fkie_cve-2023-37917 https://cve.radiocsirt.org/vuln/ghsa-757p-vx43-fp9r <p><strong>Affected:</strong> Go: github.com/KubeOperator/kubepi</p> <p>### Summary A normal user has permission to create/update users, they can become admin by editing the `isadmin` value in the request</p> <p>### PoC Change the value of the `isadmin` field in the request to true: https://drive.google.com/file/d/1e8XJbIFIDXaFiL-dqn0a0b6u7o3CwqSG/preview</p> <p>### Impact Elevate user privileges</p> <p><strong>Affected:</strong> Go: github.com/KubeOperator/kubepi</p> <p>### Summary A normal user has permission to create/update users, they can become admin by editing the `isadmin` value in the request</p> <p>### PoC Change the value of the `isadmin` field in the request to true: https://drive.google.com/file/d/1e8XJbIFIDXaFiL-dqn0a0b6u7o3CwqSG/preview</p> <p>### Impact Elevate user privileges</p> https://cve.radiocsirt.org/vuln/ghsa-757p-vx43-fp9r https://cve.radiocsirt.org/vuln/gsd-2023-37917 gsd-2023-37917 https://cve.radiocsirt.org/vuln/gsd-2023-37917