TI-2023-00874 CVE-2023-0923 · GHSA-ffvf-vj8c-4hf8
Odh-notebook-controller-container: missing authorization allows for file contents disclosure
Priority MEDIUM 44
A flaw was found in the Kubernetes service for notebooks in RHODS, where it does not prevent pods from other namespaces and applications from making requests to the Jupyter API.