Kubeflow/Kubeflow
Approved changes feed: RSS · Atom
cpe:2.3:a:kubeflow:kubeflow/kubeflow:*:*:*:*:*:*:*:*
part: a version: * update: *
| Vendor | Kubeflow (77ae1be4-7ba0-5fe9-a078-f8b5b06cfb80) |
|---|---|
| Product | Kubeflow/Kubeflow (4ff2b99d-8f7b-5f35-a17e-e49777179902) |
| Edition | * |
| Language | * |
| Software edition | * |
| Target software | * |
| Target hardware | * |
| Other | * |
| Notes | Imported from gcve-enriched-dumps CVE data |
PURL mappings
| PURL | Source | Last updated |
|---|---|---|
| No PURL mappings for this CPE yet. | ||
Vulnerability references
| Identifier | cpeApplicability | Submitted | db.gcve.eu details | Rationale |
|---|---|---|---|---|
CVE:CVE-2024-5552 |
vulnerable | 2026-06-08 06:56:16.526859 |
ReDoS in kubeflow/kubeflow
HIGH (7.5)
kubeflow/kubeflow is vulnerable to a Regular Expression Denial of Service (ReDoS) attack due to inefficient regular expression complexity in its email validation mechanism. An attacker can remotely exploit this vulnerability without authentication by providing specially crafted input that causes the application to consume an excessive amount of CPU resources. This vulnerability affects the latest version of kubeflow/kubeflow, specifically within the centraldashboard-angular backend component. The impact of exploiting this vulnerability includes resource exhaustion, and service disruption.
Published: 2024-06-06T18:09:09.149Z
Updated: 2024-08-01T21:18:06.319Z Reference links |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2023-6571 |
vulnerable | 2026-06-08 06:21:54.945607 |
Cross-site Scripting (XSS) - Reflected in kubeflow/kubeflow
MEDIUM (5.4)
Cross-site Scripting (XSS) - Reflected in kubeflow/kubeflow
Published: 2023-12-14T13:00:06.671Z
Updated: 2024-08-02T08:35:14.472Z Reference links |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2023-6570 |
vulnerable | 2026-06-08 06:21:54.942271 |
Server-Side Request Forgery (SSRF) in kubeflow/kubeflow
HIGH (7.7)
Server-Side Request Forgery (SSRF) in kubeflow/kubeflow
Published: 2023-12-14T12:59:57.426Z
Updated: 2024-08-02T08:35:14.402Z Reference links |
Imported from gcve-enriched-dumps CVE data |
Contribute
You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.