| Package | Affected versions | Patched versions |
|---|---|---|
| github.com/KubeOperator/kubepi | < 1.6.5 | 1.6.5 |
| kubepi | < 1.6.5 | 1.6.5 |
A normal user has permission to create/update users, they can become admin by editing the isadmin value in the request
Change the value of the isadmin field in the request to true:
https://drive.google.com/file/d/1e8XJbIFIDXaFiL-dqn0a0b6u7o3CwqSG/preview
Elevate user privileges
Running one of these products? Scan your site to see whether it exposes a vulnerable version.
Scan my site free