Vendors / kubeflow Records 20 All Threatist records
Exploited (KEV) 0 None in CISA KEV
CVSS critical 2
CVSS high 10
Exploited now kubeflow records in CISA KEV No kubeflow vulnerabilities are listed in CISA KEV.
Components Products in the NVD configurations · select one to filter the records Priority HIGH 72
kubeflow/kubeflow is vulnerable to a Regular Expression Denial of Service (ReDoS) attack due to inefficient regular expression complexity in its email validation mechanism.
CVSS 3.1 HIGH 7.5· Network · No auth · No interaction · EPSS 0.00649 · Published 2024-06-06 · No fix listed CWE-1333
Priority LOW 30
Server-Side Request Forgery (SSRF) in kubeflow/kubeflow
CVSS 3.1 MEDIUM 6.5· Network · Low privileges · No interaction · EPSS 0.00605 · Published 2023-12-14 · Will not fix CWE-918
Priority LOW 28
Cross-site Scripting (XSS) - Reflected in kubeflow/kubeflow
CVSS 3.1 MEDIUM 6.1· Network · No auth · User interaction · EPSS 0.00446 · Published 2023-12-14 · Will not fix CWE-79
Open these records in search → All records by CVSS severity
2 10 8 0 0
