KubePi Privilege Escalation vulnerability

高 8.8CVE-2023-37917 · GHSA-757p-vx43-fp9r · GO-2023-1956 · 21/07/2023 公開 · 17/06/2026 更新

要点

CVE-2023-37917 は github.com/KubeOperator/kubepi, kubepi (fit2cloud) に影響する深刻度「高」 (CVSS 8.8) の脆弱性です。
今後30日間に悪用される確率（EPSS）：0.74%（全脆弱性の 54.7% より高い）。
対処：1.6.5 以降に更新してください。

パッケージ	影響を受けるバージョン	修正済みバージョン
github.com/KubeOperator/kubepi Go	`< 1.6.5`	`1.6.5`
kubepi fit2cloud	`< 1.6.5`	`1.6.5`

概要

Summary

A normal user has permission to create/update users, they can become admin by editing the isadmin value in the request

PoC

Change the value of the isadmin field in the request to true: https://drive.google.com/file/d/1e8XJbIFIDXaFiL-dqn0a0b6u7o3CwqSG/preview

Impact

Elevate user privileges

NVD の説明

KubePi is an opensource kubernetes management panel. A normal user has permission to create/update users, they can become admin by editing the `isadmin` value in the request. As a result any user may take administrative control of KubePi. This issue has been addressed in version 1.6.5. Users are advised to upgrade. There are no known workarounds for this vulnerability.