Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

nvd логотип

CVE-2024-9526

Опубликовано: 18 нояб. 2024
Источник: nvd
CVSS3: 5.4
EPSS Низкий

Описание

There exists a stored XSS Vulnerability in Kubeflow Pipeline View web UI. The Kubeflow Web UI allows to create new pipelines. When creating a new pipeline, it is possible to add a description. The description field allows html tags, which are not filtered properly. Leading to a stored XSS. We recommend upgrading past commit 930c35f1c543998e60e8d648ce93185c9b5dbe8d

Уязвимые конфигурации

Конфигурация 1
cpe:2.3:a:kubeflow:pipelines:*:*:*:*:*:*:*:*
Версия до 2023-12-13 (исключая)

EPSS

Процентиль: 29%
0.00103
Низкий

5.4 Medium

CVSS3

Дефекты

CWE-79

Связанные уязвимости

github
около 1 года назад

There exists a stored XSS Vulnerability in Kubeflow Pipeline View web UI. The Kubeflow Web UI allows to create new pipelines. When creating a new pipeline, it is possible to add a description. The description field allows html tags, which are not filtered properly. Leading to a stored XSS. We recommend upgrading past commit 930c35f1c543998e60e8d648ce93185c9b5dbe8d

EPSS

Процентиль: 29%
0.00103
Низкий

5.4 Medium

CVSS3

Дефекты

CWE-79