KubePi Privilege Escalation vulnerability · CVE-2023-37917 · GitHub Advisory Database · GitHub

KubePi Privilege Escalation vulnerability

Critical severity GitHub Reviewed Published Jul 21, 2023 in 1Panel-dev/KubePi • Updated Nov 8, 2023

Package

github.com/KubeOperator/kubepi (Go)

Affected versions

< 1.6.5

Patched versions

1.6.5

Description

Summary

A normal user has permission to create/update users, they can become admin by editing the isadmin value in the request

PoC

Change the value of the isadmin field in the request to true:
https://drive.google.com/file/d/1e8XJbIFIDXaFiL-dqn0a0b6u7o3CwqSG/preview

Impact

Elevate user privileges

References

wanghe-fit2cloud published to 1Panel-dev/KubePi

Jul 21, 2023

Published to the GitHub Advisory Database Jul 21, 2023

Reviewed Jul 21, 2023

Published by the National Vulnerability Database

Jul 21, 2023

Last updated Nov 8, 2023

Severity

Critical

9.1

/ 10

CVSS base metrics

Attack vector

Network

Attack complexity

Low

Privileges required

Low

User interaction

None

Scope

Changed

Confidentiality

Low

Integrity

High

Availability

Low

CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:L/I:H/A:L