Go/github.com/kubesphere/kubesphere CVE-2024-46528: medium 6.5, EPSS 1.58%
KubeSphere IDOR vulnerability
Action: Upgrade github.com/kubesphere/kubesphere to 3.4.1 or later.
go get github.com/kubesphere/kubesphere@v4.1.3go get github.com/kubesphere/kubesphere@v3.4.1Affected
| introduced | fixed | last affected |
|---|---|---|
| 4.0.0 | 4.1.3 | - |
| 3.0.0 | 3.4.1 | - |
Fixed versions
| 4.1.3 | 3.4.1 |
Sources
- osv: GHSA-p26r-gfgc-c47h
- https://nvd.nist.gov/vuln/detail/CVE-2024-46528
- https://github.com/kubesphere/kubesphere/issues/6227
- https://github.com/kubesphere/kubesphere
- https://kubesphere.io
- https://okankurtulus.com.tr/2024/09/09/idor-vulnerability-in-kubesphere
- https://pkg.go.dev/vuln/GO-2024-3248
- https://www.kubesphere.io/news/kubesphere-cve-2024-46528
CVE-2024-46528 · published · modified · JSON