CVE & Vulnerability

CVE-2024-9526 - Kubeflow Pipeline View Stored XSS

CVE ID : CVE-2024-9526 Published : Nov. 18, 2024, 2:15 p.m. | 1 hour ago Description : There exists a stored XSS Vulnerability in Kubeflow Pipeline View web UI. The Kubeflow Web UI allows to create new pipelines. When creating a new pipeline, it is possible to add a description. The description field allows html tags, which are not filtered properly. Leading to a stored XSS. We recommend upgrading past commit 930c35f1c543998e60e8d648ce93185c9b5dbe8d Severity: 0.0 | NA Visit the link for more details, such as CVSS details, affected products, timeline, and more...

AutorAutor
Nov 18, 2024 - 16:15
 0  2
CVE-2024-9526 - Kubeflow Pipeline View Stored XSS
CVE ID : CVE-2024-9526
Published : Nov. 18, 2024, 2:15 p.m. | 1 hour ago
Description : There exists a stored XSS Vulnerability in Kubeflow Pipeline View web UI. The Kubeflow Web UI allows to create new pipelines. When creating a new pipeline, it is possible to add a description. The description field allows html tags, which are not filtered properly. Leading to a stored XSS. We recommend upgrading past commit 930c35f1c543998e60e8d648ce93185c9b5dbe8d
Severity: 0.0 | NA
Visit the link for more details, such as CVSS details, affected products, timeline, and more...
Read More

Tags:

Vorheriger Artikel

CVE-2024-8781 - TR7 Application Security Platform (ASP) Alternate Path Privilege...

Nächster Artikel

CVE-2024-11303 - Korenix JetPort 5601 Path Traversal

Autor
Autor

Verwandte Beiträge

CVE-2024-44062 - Hiroaki Miyashita Custom Field Template Stored XSS Vulnerability

CVE-2024-44062 - Hiroaki Miyashita Custom Field Templat...

Autor Sep 15, 2024  0  2

CVE-2024-49358 - ZimaOS UEFI Username Enumeration Vulnerability

CVE-2024-49358 - ZimaOS UEFI Username Enumeration Vulne...

Autor Okt 25, 2024  0  2

CVE-2024-40087 - Vilo 5 Mesh WiFi System Unauthenticated Remote Administrative Access Vulnerability

CVE-2024-40087 - Vilo 5 Mesh WiFi System Unauthenticate...

Autor Okt 22, 2024  0  2