Vulnerabilities in Kubeflow

6 results

Vexday analysis

Kubeflow apresenta um perfil de risco mínimo com apenas 1 CVE catalogada, sem registros de exploração ativa ou vulnerabilidades críticas. A fraqueza identificada (CWE-79, Cross-site Scripting) é de severidade moderada e não representa exposição imediata, dado que nenhuma exploração foi documentada na base KEV.

CVE-2024-5552HIGHReDoS in kubeflow/kubeflowEPSS 0.6%CVE-2023-6570HIGHServer-Side Request Forgery (SSRF) in kubeflow/kubeflowEPSS 0.6%CVE-2023-6571MEDIUMCross-site Scripting (XSS) - Reflected in kubeflow/kubeflowEPSS 0.4%CVE-2026-54745CRITICALKubeflow Pipelines: Unauthenticated SSRF and HTTP smuggling in Kubeflow Pipelines frontend /_proxy/ route, bypasses ENABLE_AUTHZ=trueEPSS 0.4%CVE-2026-47237HIGHKubeflow Community Distribution: Overly Permissive Istio Permissions Allows Kubeflow Authorization Token StealingEPSS 0.4%CVE-2024-9526HIGHStored XSS in Kubeflow Pipeline ViewEPSS 0.2%