Read the docs
TI-2023-26089 Aliases CVE-2023-48225

Laf env causes sensitive information disclosure

Priority MEDIUM 41CWE-200Published · Updated

Key facts

Attack vector
Network
Privileges required
None
User interaction
None
Attack complexity
Low
Impact type
Information disclosure
Confidentiality · integrity · availability
High · High · None
Fix status
Fixed

Attack profile from CVSS 3.1 · NVD. Fix status from CNA. Impact type from CWE-200.

Summary

Laf is a cloud development platform. Prior to version 1.0.0-beta.13, the control of LAF app enV is not strict enough, and in certain scenarios of privatization environment, it may lead to sensitive information leakage in secret and configmap. In ES6 syntax, if an obj directly references another obj, the name of the obj itself will be used as the key, and the entire object structure will be integrated intact. When constructing the deployment instance of the app, env was found from the database and directly inserted into the template, resulting in controllability here. Sensitive information in the secret and configmap can be read through the k8s envFrom field. In a privatization environment, when `namespaceConf. fixed` is marked, it may lead to the leakage of sensitive information in the system. As of time of publication, it is unclear whether any patches or workarounds exist.

Why it matters now

EPSS 0.00796 56th percentileScored 2026-11-07
Public exploit Yes 1 exploit referenceTagged by NVD
Fix Fixed laf (labring): 1.0.0-beta13

SSVC decision points

Not available: CISA has not published SSVC decision points for this record.

Affected products

VendorProductAffected versionsFixed inStatusSource
labringlafbefore 1.0.0-beta131.0.0-beta13Patch availableCNA
  • laf Vendorlabring Affected before 1.0.0-beta13 Fixed in 1.0.0-beta13 Patch available CNA

CPE configurations NVD · 140

CPEVersionsRoleVendor
cpe:2.3:a:laf:laf:0.1.5:*:*:*:*:*:*:*0.1.5VulnerableLaf
cpe:2.3:a:laf:laf:0.4.0:*:*:*:*:*:*:*0.4.0VulnerableLaf
cpe:2.3:a:laf:laf:0.4.1:*:*:*:*:*:*:*0.4.1VulnerableLaf
cpe:2.3:a:laf:laf:0.4.2:*:*:*:*:*:*:*0.4.2VulnerableLaf
cpe:2.3:a:laf:laf:0.4.3:*:*:*:*:*:*:*0.4.3VulnerableLaf
cpe:2.3:a:laf:laf:0.4.4:*:*:*:*:*:*:*0.4.4VulnerableLaf
cpe:2.3:a:laf:laf:0.4.5:*:*:*:*:*:*:*0.4.5VulnerableLaf
cpe:2.3:a:laf:laf:0.4.6:*:*:*:*:*:*:*0.4.6VulnerableLaf
cpe:2.3:a:laf:laf:0.4.7:*:*:*:*:*:*:*0.4.7VulnerableLaf
cpe:2.3:a:laf:laf:0.4.8:*:*:*:*:*:*:*0.4.8VulnerableLaf
  • cpe:2.3:a:laf:laf:0.1.5:*:*:*:*:*:*:* Versions 0.1.5 Vulnerable ·Laf
  • cpe:2.3:a:laf:laf:0.4.0:*:*:*:*:*:*:* Versions 0.4.0 Vulnerable ·Laf
  • cpe:2.3:a:laf:laf:0.4.1:*:*:*:*:*:*:* Versions 0.4.1 Vulnerable ·Laf
  • cpe:2.3:a:laf:laf:0.4.2:*:*:*:*:*:*:* Versions 0.4.2 Vulnerable ·Laf
  • cpe:2.3:a:laf:laf:0.4.3:*:*:*:*:*:*:* Versions 0.4.3 Vulnerable ·Laf
  • cpe:2.3:a:laf:laf:0.4.4:*:*:*:*:*:*:* Versions 0.4.4 Vulnerable ·Laf
  • cpe:2.3:a:laf:laf:0.4.5:*:*:*:*:*:*:* Versions 0.4.5 Vulnerable ·Laf
  • cpe:2.3:a:laf:laf:0.4.6:*:*:*:*:*:*:* Versions 0.4.6 Vulnerable ·Laf
  • cpe:2.3:a:laf:laf:0.4.7:*:*:*:*:*:*:* Versions 0.4.7 Vulnerable ·Laf
  • cpe:2.3:a:laf:laf:0.4.8:*:*:*:*:*:*:* Versions 0.4.8 Vulnerable ·Laf
Show 130 more CPE
CPEVersionsRoleVendor
cpe:2.3:a:laf:laf:0.4.9:*:*:*:*:*:*:*0.4.9VulnerableLaf
cpe:2.3:a:laf:laf:0.4.10:*:*:*:*:*:*:*0.4.10VulnerableLaf
cpe:2.3:a:laf:laf:0.4.11:*:*:*:*:*:*:*0.4.11VulnerableLaf
cpe:2.3:a:laf:laf:0.4.12:*:*:*:*:*:*:*0.4.12VulnerableLaf
cpe:2.3:a:laf:laf:0.4.13:*:*:*:*:*:*:*0.4.13VulnerableLaf
cpe:2.3:a:laf:laf:0.4.14:*:*:*:*:*:*:*0.4.14VulnerableLaf
cpe:2.3:a:laf:laf:0.4.15:*:*:*:*:*:*:*0.4.15VulnerableLaf
cpe:2.3:a:laf:laf:0.4.16:*:*:*:*:*:*:*0.4.16VulnerableLaf
cpe:2.3:a:laf:laf:0.4.17:*:*:*:*:*:*:*0.4.17VulnerableLaf
cpe:2.3:a:laf:laf:0.4.18:*:*:*:*:*:*:*0.4.18VulnerableLaf
cpe:2.3:a:laf:laf:0.4.19:*:*:*:*:*:*:*0.4.19VulnerableLaf
cpe:2.3:a:laf:laf:0.4.20:*:*:*:*:*:*:*0.4.20VulnerableLaf
cpe:2.3:a:laf:laf:0.4.21:alpha0:*:*:*:*:*:*0.4.21 alpha0VulnerableLaf
cpe:2.3:a:laf:laf:0.5.0:*:*:*:*:*:*:*0.5.0VulnerableLaf
cpe:2.3:a:laf:laf:0.5.0:alpha0:*:*:*:*:*:*0.5.0 alpha0VulnerableLaf
cpe:2.3:a:laf:laf:0.5.0:alpha1:*:*:*:*:*:*0.5.0 alpha1VulnerableLaf
cpe:2.3:a:laf:laf:0.5.0:alpha2:*:*:*:*:*:*0.5.0 alpha2VulnerableLaf
cpe:2.3:a:laf:laf:0.5.0:alpha3:*:*:*:*:*:*0.5.0 alpha3VulnerableLaf
cpe:2.3:a:laf:laf:0.5.1:*:*:*:*:*:*:*0.5.1VulnerableLaf
cpe:2.3:a:laf:laf:0.5.1:alpha0:*:*:*:*:*:*0.5.1 alpha0VulnerableLaf
cpe:2.3:a:laf:laf:0.5.2:*:*:*:*:*:*:*0.5.2VulnerableLaf
cpe:2.3:a:laf:laf:0.5.2:alpha0:*:*:*:*:*:*0.5.2 alpha0VulnerableLaf
cpe:2.3:a:laf:laf:0.5.3:*:*:*:*:*:*:*0.5.3VulnerableLaf
cpe:2.3:a:laf:laf:0.5.4:*:*:*:*:*:*:*0.5.4VulnerableLaf
cpe:2.3:a:laf:laf:0.5.4:alpha0:*:*:*:*:*:*0.5.4 alpha0VulnerableLaf
cpe:2.3:a:laf:laf:0.5.5:*:*:*:*:*:*:*0.5.5VulnerableLaf
cpe:2.3:a:laf:laf:0.5.5:alpha0:*:*:*:*:*:*0.5.5 alpha0VulnerableLaf
cpe:2.3:a:laf:laf:0.5.6:*:*:*:*:*:*:*0.5.6VulnerableLaf
cpe:2.3:a:laf:laf:0.5.7:*:*:*:*:*:*:*0.5.7VulnerableLaf
cpe:2.3:a:laf:laf:0.5.7:alpha0:*:*:*:*:*:*0.5.7 alpha0VulnerableLaf
cpe:2.3:a:laf:laf:0.5.8:alpha0:*:*:*:*:*:*0.5.8 alpha0VulnerableLaf
cpe:2.3:a:laf:laf:0.6.0:*:*:*:*:*:*:*0.6.0VulnerableLaf
cpe:2.3:a:laf:laf:0.6.0:alpha0:*:*:*:*:*:*0.6.0 alpha0VulnerableLaf
cpe:2.3:a:laf:laf:0.6.0:alpha1:*:*:*:*:*:*0.6.0 alpha1VulnerableLaf
cpe:2.3:a:laf:laf:0.6.0:alpha10:*:*:*:*:*:*0.6.0 alpha10VulnerableLaf
cpe:2.3:a:laf:laf:0.6.0:alpha2:*:*:*:*:*:*0.6.0 alpha2VulnerableLaf
cpe:2.3:a:laf:laf:0.6.0:alpha3:*:*:*:*:*:*0.6.0 alpha3VulnerableLaf
cpe:2.3:a:laf:laf:0.6.0:alpha4:*:*:*:*:*:*0.6.0 alpha4VulnerableLaf
cpe:2.3:a:laf:laf:0.6.0:alpha5:*:*:*:*:*:*0.6.0 alpha5VulnerableLaf
cpe:2.3:a:laf:laf:0.6.0:alpha6:*:*:*:*:*:*0.6.0 alpha6VulnerableLaf
cpe:2.3:a:laf:laf:0.6.0:alpha7:*:*:*:*:*:*0.6.0 alpha7VulnerableLaf
cpe:2.3:a:laf:laf:0.6.0:alpha8:*:*:*:*:*:*0.6.0 alpha8VulnerableLaf
cpe:2.3:a:laf:laf:0.6.0:alpha9:*:*:*:*:*:*0.6.0 alpha9VulnerableLaf
cpe:2.3:a:laf:laf:0.6.1:*:*:*:*:*:*:*0.6.1VulnerableLaf
cpe:2.3:a:laf:laf:0.6.2:*:*:*:*:*:*:*0.6.2VulnerableLaf
cpe:2.3:a:laf:laf:0.6.3:*:*:*:*:*:*:*0.6.3VulnerableLaf
cpe:2.3:a:laf:laf:0.6.4:*:*:*:*:*:*:*0.6.4VulnerableLaf
cpe:2.3:a:laf:laf:0.6.5:*:*:*:*:*:*:*0.6.5VulnerableLaf
cpe:2.3:a:laf:laf:0.6.6:*:*:*:*:*:*:*0.6.6VulnerableLaf
cpe:2.3:a:laf:laf:0.6.7:*:*:*:*:*:*:*0.6.7VulnerableLaf
cpe:2.3:a:laf:laf:0.6.8:*:*:*:*:*:*:*0.6.8VulnerableLaf
cpe:2.3:a:laf:laf:0.6.9:*:*:*:*:*:*:*0.6.9VulnerableLaf
cpe:2.3:a:laf:laf:0.6.10:*:*:*:*:*:*:*0.6.10VulnerableLaf
cpe:2.3:a:laf:laf:0.6.11:*:*:*:*:*:*:*0.6.11VulnerableLaf
cpe:2.3:a:laf:laf:0.6.12:*:*:*:*:*:*:*0.6.12VulnerableLaf
cpe:2.3:a:laf:laf:0.6.13:*:*:*:*:*:*:*0.6.13VulnerableLaf
cpe:2.3:a:laf:laf:0.6.14:*:*:*:*:*:*:*0.6.14VulnerableLaf
cpe:2.3:a:laf:laf:0.6.15:*:*:*:*:*:*:*0.6.15VulnerableLaf
cpe:2.3:a:laf:laf:0.6.16:*:*:*:*:*:*:*0.6.16VulnerableLaf
cpe:2.3:a:laf:laf:0.6.17:*:*:*:*:*:*:*0.6.17VulnerableLaf
cpe:2.3:a:laf:laf:0.6.18:*:*:*:*:*:*:*0.6.18VulnerableLaf
cpe:2.3:a:laf:laf:0.6.19:*:*:*:*:*:*:*0.6.19VulnerableLaf
cpe:2.3:a:laf:laf:0.6.20:*:*:*:*:*:*:*0.6.20VulnerableLaf
cpe:2.3:a:laf:laf:0.6.21:*:*:*:*:*:*:*0.6.21VulnerableLaf
cpe:2.3:a:laf:laf:0.6.22:*:*:*:*:*:*:*0.6.22VulnerableLaf
cpe:2.3:a:laf:laf:0.6.23:*:*:*:*:*:*:*0.6.23VulnerableLaf
cpe:2.3:a:laf:laf:0.7.0:*:*:*:*:*:*:*0.7.0VulnerableLaf
cpe:2.3:a:laf:laf:0.7.1:*:*:*:*:*:*:*0.7.1VulnerableLaf
cpe:2.3:a:laf:laf:0.7.2:*:*:*:*:*:*:*0.7.2VulnerableLaf
cpe:2.3:a:laf:laf:0.7.3:*:*:*:*:*:*:*0.7.3VulnerableLaf
cpe:2.3:a:laf:laf:0.7.4:*:*:*:*:*:*:*0.7.4VulnerableLaf
cpe:2.3:a:laf:laf:0.7.5:*:*:*:*:*:*:*0.7.5VulnerableLaf
cpe:2.3:a:laf:laf:0.7.6:*:*:*:*:*:*:*0.7.6VulnerableLaf
cpe:2.3:a:laf:laf:0.7.7:*:*:*:*:*:*:*0.7.7VulnerableLaf
cpe:2.3:a:laf:laf:0.7.8:*:*:*:*:*:*:*0.7.8VulnerableLaf
cpe:2.3:a:laf:laf:0.7.9:*:*:*:*:*:*:*0.7.9VulnerableLaf
cpe:2.3:a:laf:laf:0.7.10:*:*:*:*:*:*:*0.7.10VulnerableLaf
cpe:2.3:a:laf:laf:0.7.11:*:*:*:*:*:*:*0.7.11VulnerableLaf
cpe:2.3:a:laf:laf:0.8.0:*:*:*:*:*:*:*0.8.0VulnerableLaf
cpe:2.3:a:laf:laf:0.8.0:alpha0:*:*:*:*:*:*0.8.0 alpha0VulnerableLaf
cpe:2.3:a:laf:laf:0.8.0:alpha1:*:*:*:*:*:*0.8.0 alpha1VulnerableLaf
cpe:2.3:a:laf:laf:0.8.0:alpha10:*:*:*:*:*:*0.8.0 alpha10VulnerableLaf
cpe:2.3:a:laf:laf:0.8.0:alpha11:*:*:*:*:*:*0.8.0 alpha11VulnerableLaf
cpe:2.3:a:laf:laf:0.8.0:alpha2:*:*:*:*:*:*0.8.0 alpha2VulnerableLaf
cpe:2.3:a:laf:laf:0.8.0:alpha3:*:*:*:*:*:*0.8.0 alpha3VulnerableLaf
cpe:2.3:a:laf:laf:0.8.0:alpha4:*:*:*:*:*:*0.8.0 alpha4VulnerableLaf
cpe:2.3:a:laf:laf:0.8.0:alpha5:*:*:*:*:*:*0.8.0 alpha5VulnerableLaf
cpe:2.3:a:laf:laf:0.8.0:alpha6:*:*:*:*:*:*0.8.0 alpha6VulnerableLaf
cpe:2.3:a:laf:laf:0.8.0:alpha7:*:*:*:*:*:*0.8.0 alpha7VulnerableLaf
cpe:2.3:a:laf:laf:0.8.0:alpha8:*:*:*:*:*:*0.8.0 alpha8VulnerableLaf
cpe:2.3:a:laf:laf:0.8.0:alpha9:*:*:*:*:*:*0.8.0 alpha9VulnerableLaf
cpe:2.3:a:laf:laf:0.8.1:*:*:*:*:*:*:*0.8.1VulnerableLaf
cpe:2.3:a:laf:laf:0.8.2:*:*:*:*:*:*:*0.8.2VulnerableLaf
cpe:2.3:a:laf:laf:0.8.3:*:*:*:*:*:*:*0.8.3VulnerableLaf
cpe:2.3:a:laf:laf:0.8.4:*:*:*:*:*:*:*0.8.4VulnerableLaf
cpe:2.3:a:laf:laf:0.8.5:*:*:*:*:*:*:*0.8.5VulnerableLaf
cpe:2.3:a:laf:laf:0.8.5:alpha0:*:*:*:*:*:*0.8.5 alpha0VulnerableLaf
cpe:2.3:a:laf:laf:0.8.6:*:*:*:*:*:*:*0.8.6VulnerableLaf
cpe:2.3:a:laf:laf:0.8.7:*:*:*:*:*:*:*0.8.7VulnerableLaf
cpe:2.3:a:laf:laf:0.8.7:alpha0:*:*:*:*:*:*0.8.7 alpha0VulnerableLaf
cpe:2.3:a:laf:laf:0.8.7:alpha1:*:*:*:*:*:*0.8.7 alpha1VulnerableLaf
cpe:2.3:a:laf:laf:0.8.7:alpha2:*:*:*:*:*:*0.8.7 alpha2VulnerableLaf
cpe:2.3:a:laf:laf:0.8.7:alpha3:*:*:*:*:*:*0.8.7 alpha3VulnerableLaf
cpe:2.3:a:laf:laf:0.8.8:*:*:*:*:*:*:*0.8.8VulnerableLaf
cpe:2.3:a:laf:laf:0.8.9:*:*:*:*:*:*:*0.8.9VulnerableLaf
cpe:2.3:a:laf:laf:0.8.10:*:*:*:*:*:*:*0.8.10VulnerableLaf
cpe:2.3:a:laf:laf:0.8.11:*:*:*:*:*:*:*0.8.11VulnerableLaf
cpe:2.3:a:laf:laf:0.8.12:*:*:*:*:*:*:*0.8.12VulnerableLaf
cpe:2.3:a:laf:laf:0.8.13:*:*:*:*:*:*:*0.8.13VulnerableLaf
cpe:2.3:a:laf:laf:1.0.0:alpha0:*:*:*:*:*:*1.0.0 alpha0VulnerableLaf
cpe:2.3:a:laf:laf:1.0.0:alpha1:*:*:*:*:*:*1.0.0 alpha1VulnerableLaf
cpe:2.3:a:laf:laf:1.0.0:alpha2:*:*:*:*:*:*1.0.0 alpha2VulnerableLaf
cpe:2.3:a:laf:laf:1.0.0:alpha3:*:*:*:*:*:*1.0.0 alpha3VulnerableLaf
cpe:2.3:a:laf:laf:1.0.0:alpha4:*:*:*:*:*:*1.0.0 alpha4VulnerableLaf
cpe:2.3:a:laf:laf:1.0.0:alpha5:*:*:*:*:*:*1.0.0 alpha5VulnerableLaf
cpe:2.3:a:laf:laf:1.0.0:alpha6:*:*:*:*:*:*1.0.0 alpha6VulnerableLaf
cpe:2.3:a:laf:laf:1.0.0:beta0:*:*:*:*:*:*1.0.0 beta0VulnerableLaf
cpe:2.3:a:laf:laf:1.0.0:beta1:*:*:*:*:*:*1.0.0 beta1VulnerableLaf
cpe:2.3:a:laf:laf:1.0.0:beta10:*:*:*:*:*:*1.0.0 beta10VulnerableLaf
cpe:2.3:a:laf:laf:1.0.0:beta11:*:*:*:*:*:*1.0.0 beta11VulnerableLaf
cpe:2.3:a:laf:laf:1.0.0:beta12:*:*:*:*:*:*1.0.0 beta12VulnerableLaf
cpe:2.3:a:laf:laf:1.0.0:beta13:*:*:*:*:*:*1.0.0 beta13VulnerableLaf
cpe:2.3:a:laf:laf:1.0.0:beta2:*:*:*:*:*:*1.0.0 beta2VulnerableLaf
cpe:2.3:a:laf:laf:1.0.0:beta3:*:*:*:*:*:*1.0.0 beta3VulnerableLaf
cpe:2.3:a:laf:laf:1.0.0:beta4:*:*:*:*:*:*1.0.0 beta4VulnerableLaf
cpe:2.3:a:laf:laf:1.0.0:beta5:*:*:*:*:*:*1.0.0 beta5VulnerableLaf
cpe:2.3:a:laf:laf:1.0.0:beta6:*:*:*:*:*:*1.0.0 beta6VulnerableLaf
cpe:2.3:a:laf:laf:1.0.0:beta7:*:*:*:*:*:*1.0.0 beta7VulnerableLaf
cpe:2.3:a:laf:laf:1.0.0:beta8:*:*:*:*:*:*1.0.0 beta8VulnerableLaf
cpe:2.3:a:laf:laf:1.0.0:beta9:*:*:*:*:*:*1.0.0 beta9VulnerableLaf
  • cpe:2.3:a:laf:laf:0.4.9:*:*:*:*:*:*:* Versions 0.4.9 Vulnerable ·Laf
  • cpe:2.3:a:laf:laf:0.4.10:*:*:*:*:*:*:* Versions 0.4.10 Vulnerable ·Laf
  • cpe:2.3:a:laf:laf:0.4.11:*:*:*:*:*:*:* Versions 0.4.11 Vulnerable ·Laf
  • cpe:2.3:a:laf:laf:0.4.12:*:*:*:*:*:*:* Versions 0.4.12 Vulnerable ·Laf
  • cpe:2.3:a:laf:laf:0.4.13:*:*:*:*:*:*:* Versions 0.4.13 Vulnerable ·Laf
  • cpe:2.3:a:laf:laf:0.4.14:*:*:*:*:*:*:* Versions 0.4.14 Vulnerable ·Laf
  • cpe:2.3:a:laf:laf:0.4.15:*:*:*:*:*:*:* Versions 0.4.15 Vulnerable ·Laf
  • cpe:2.3:a:laf:laf:0.4.16:*:*:*:*:*:*:* Versions 0.4.16 Vulnerable ·Laf
  • cpe:2.3:a:laf:laf:0.4.17:*:*:*:*:*:*:* Versions 0.4.17 Vulnerable ·Laf
  • cpe:2.3:a:laf:laf:0.4.18:*:*:*:*:*:*:* Versions 0.4.18 Vulnerable ·Laf
  • cpe:2.3:a:laf:laf:0.4.19:*:*:*:*:*:*:* Versions 0.4.19 Vulnerable ·Laf
  • cpe:2.3:a:laf:laf:0.4.20:*:*:*:*:*:*:* Versions 0.4.20 Vulnerable ·Laf
  • cpe:2.3:a:laf:laf:0.4.21:alpha0:*:*:*:*:*:* Versions 0.4.21 alpha0 Vulnerable ·Laf
  • cpe:2.3:a:laf:laf:0.5.0:*:*:*:*:*:*:* Versions 0.5.0 Vulnerable ·Laf
  • cpe:2.3:a:laf:laf:0.5.0:alpha0:*:*:*:*:*:* Versions 0.5.0 alpha0 Vulnerable ·Laf
  • cpe:2.3:a:laf:laf:0.5.0:alpha1:*:*:*:*:*:* Versions 0.5.0 alpha1 Vulnerable ·Laf
  • cpe:2.3:a:laf:laf:0.5.0:alpha2:*:*:*:*:*:* Versions 0.5.0 alpha2 Vulnerable ·Laf
  • cpe:2.3:a:laf:laf:0.5.0:alpha3:*:*:*:*:*:* Versions 0.5.0 alpha3 Vulnerable ·Laf
  • cpe:2.3:a:laf:laf:0.5.1:*:*:*:*:*:*:* Versions 0.5.1 Vulnerable ·Laf
  • cpe:2.3:a:laf:laf:0.5.1:alpha0:*:*:*:*:*:* Versions 0.5.1 alpha0 Vulnerable ·Laf
  • cpe:2.3:a:laf:laf:0.5.2:*:*:*:*:*:*:* Versions 0.5.2 Vulnerable ·Laf
  • cpe:2.3:a:laf:laf:0.5.2:alpha0:*:*:*:*:*:* Versions 0.5.2 alpha0 Vulnerable ·Laf
  • cpe:2.3:a:laf:laf:0.5.3:*:*:*:*:*:*:* Versions 0.5.3 Vulnerable ·Laf
  • cpe:2.3:a:laf:laf:0.5.4:*:*:*:*:*:*:* Versions 0.5.4 Vulnerable ·Laf
  • cpe:2.3:a:laf:laf:0.5.4:alpha0:*:*:*:*:*:* Versions 0.5.4 alpha0 Vulnerable ·Laf
  • cpe:2.3:a:laf:laf:0.5.5:*:*:*:*:*:*:* Versions 0.5.5 Vulnerable ·Laf
  • cpe:2.3:a:laf:laf:0.5.5:alpha0:*:*:*:*:*:* Versions 0.5.5 alpha0 Vulnerable ·Laf
  • cpe:2.3:a:laf:laf:0.5.6:*:*:*:*:*:*:* Versions 0.5.6 Vulnerable ·Laf
  • cpe:2.3:a:laf:laf:0.5.7:*:*:*:*:*:*:* Versions 0.5.7 Vulnerable ·Laf
  • cpe:2.3:a:laf:laf:0.5.7:alpha0:*:*:*:*:*:* Versions 0.5.7 alpha0 Vulnerable ·Laf
  • cpe:2.3:a:laf:laf:0.5.8:alpha0:*:*:*:*:*:* Versions 0.5.8 alpha0 Vulnerable ·Laf
  • cpe:2.3:a:laf:laf:0.6.0:*:*:*:*:*:*:* Versions 0.6.0 Vulnerable ·Laf
  • cpe:2.3:a:laf:laf:0.6.0:alpha0:*:*:*:*:*:* Versions 0.6.0 alpha0 Vulnerable ·Laf
  • cpe:2.3:a:laf:laf:0.6.0:alpha1:*:*:*:*:*:* Versions 0.6.0 alpha1 Vulnerable ·Laf
  • cpe:2.3:a:laf:laf:0.6.0:alpha10:*:*:*:*:*:* Versions 0.6.0 alpha10 Vulnerable ·Laf
  • cpe:2.3:a:laf:laf:0.6.0:alpha2:*:*:*:*:*:* Versions 0.6.0 alpha2 Vulnerable ·Laf
  • cpe:2.3:a:laf:laf:0.6.0:alpha3:*:*:*:*:*:* Versions 0.6.0 alpha3 Vulnerable ·Laf
  • cpe:2.3:a:laf:laf:0.6.0:alpha4:*:*:*:*:*:* Versions 0.6.0 alpha4 Vulnerable ·Laf
  • cpe:2.3:a:laf:laf:0.6.0:alpha5:*:*:*:*:*:* Versions 0.6.0 alpha5 Vulnerable ·Laf
  • cpe:2.3:a:laf:laf:0.6.0:alpha6:*:*:*:*:*:* Versions 0.6.0 alpha6 Vulnerable ·Laf
  • cpe:2.3:a:laf:laf:0.6.0:alpha7:*:*:*:*:*:* Versions 0.6.0 alpha7 Vulnerable ·Laf
  • cpe:2.3:a:laf:laf:0.6.0:alpha8:*:*:*:*:*:* Versions 0.6.0 alpha8 Vulnerable ·Laf
  • cpe:2.3:a:laf:laf:0.6.0:alpha9:*:*:*:*:*:* Versions 0.6.0 alpha9 Vulnerable ·Laf
  • cpe:2.3:a:laf:laf:0.6.1:*:*:*:*:*:*:* Versions 0.6.1 Vulnerable ·Laf
  • cpe:2.3:a:laf:laf:0.6.2:*:*:*:*:*:*:* Versions 0.6.2 Vulnerable ·Laf
  • cpe:2.3:a:laf:laf:0.6.3:*:*:*:*:*:*:* Versions 0.6.3 Vulnerable ·Laf
  • cpe:2.3:a:laf:laf:0.6.4:*:*:*:*:*:*:* Versions 0.6.4 Vulnerable ·Laf
  • cpe:2.3:a:laf:laf:0.6.5:*:*:*:*:*:*:* Versions 0.6.5 Vulnerable ·Laf
  • cpe:2.3:a:laf:laf:0.6.6:*:*:*:*:*:*:* Versions 0.6.6 Vulnerable ·Laf
  • cpe:2.3:a:laf:laf:0.6.7:*:*:*:*:*:*:* Versions 0.6.7 Vulnerable ·Laf
  • cpe:2.3:a:laf:laf:0.6.8:*:*:*:*:*:*:* Versions 0.6.8 Vulnerable ·Laf
  • cpe:2.3:a:laf:laf:0.6.9:*:*:*:*:*:*:* Versions 0.6.9 Vulnerable ·Laf
  • cpe:2.3:a:laf:laf:0.6.10:*:*:*:*:*:*:* Versions 0.6.10 Vulnerable ·Laf
  • cpe:2.3:a:laf:laf:0.6.11:*:*:*:*:*:*:* Versions 0.6.11 Vulnerable ·Laf
  • cpe:2.3:a:laf:laf:0.6.12:*:*:*:*:*:*:* Versions 0.6.12 Vulnerable ·Laf
  • cpe:2.3:a:laf:laf:0.6.13:*:*:*:*:*:*:* Versions 0.6.13 Vulnerable ·Laf
  • cpe:2.3:a:laf:laf:0.6.14:*:*:*:*:*:*:* Versions 0.6.14 Vulnerable ·Laf
  • cpe:2.3:a:laf:laf:0.6.15:*:*:*:*:*:*:* Versions 0.6.15 Vulnerable ·Laf
  • cpe:2.3:a:laf:laf:0.6.16:*:*:*:*:*:*:* Versions 0.6.16 Vulnerable ·Laf
  • cpe:2.3:a:laf:laf:0.6.17:*:*:*:*:*:*:* Versions 0.6.17 Vulnerable ·Laf
  • cpe:2.3:a:laf:laf:0.6.18:*:*:*:*:*:*:* Versions 0.6.18 Vulnerable ·Laf
  • cpe:2.3:a:laf:laf:0.6.19:*:*:*:*:*:*:* Versions 0.6.19 Vulnerable ·Laf
  • cpe:2.3:a:laf:laf:0.6.20:*:*:*:*:*:*:* Versions 0.6.20 Vulnerable ·Laf
  • cpe:2.3:a:laf:laf:0.6.21:*:*:*:*:*:*:* Versions 0.6.21 Vulnerable ·Laf
  • cpe:2.3:a:laf:laf:0.6.22:*:*:*:*:*:*:* Versions 0.6.22 Vulnerable ·Laf
  • cpe:2.3:a:laf:laf:0.6.23:*:*:*:*:*:*:* Versions 0.6.23 Vulnerable ·Laf
  • cpe:2.3:a:laf:laf:0.7.0:*:*:*:*:*:*:* Versions 0.7.0 Vulnerable ·Laf
  • cpe:2.3:a:laf:laf:0.7.1:*:*:*:*:*:*:* Versions 0.7.1 Vulnerable ·Laf
  • cpe:2.3:a:laf:laf:0.7.2:*:*:*:*:*:*:* Versions 0.7.2 Vulnerable ·Laf
  • cpe:2.3:a:laf:laf:0.7.3:*:*:*:*:*:*:* Versions 0.7.3 Vulnerable ·Laf
  • cpe:2.3:a:laf:laf:0.7.4:*:*:*:*:*:*:* Versions 0.7.4 Vulnerable ·Laf
  • cpe:2.3:a:laf:laf:0.7.5:*:*:*:*:*:*:* Versions 0.7.5 Vulnerable ·Laf
  • cpe:2.3:a:laf:laf:0.7.6:*:*:*:*:*:*:* Versions 0.7.6 Vulnerable ·Laf
  • cpe:2.3:a:laf:laf:0.7.7:*:*:*:*:*:*:* Versions 0.7.7 Vulnerable ·Laf
  • cpe:2.3:a:laf:laf:0.7.8:*:*:*:*:*:*:* Versions 0.7.8 Vulnerable ·Laf
  • cpe:2.3:a:laf:laf:0.7.9:*:*:*:*:*:*:* Versions 0.7.9 Vulnerable ·Laf
  • cpe:2.3:a:laf:laf:0.7.10:*:*:*:*:*:*:* Versions 0.7.10 Vulnerable ·Laf
  • cpe:2.3:a:laf:laf:0.7.11:*:*:*:*:*:*:* Versions 0.7.11 Vulnerable ·Laf
  • cpe:2.3:a:laf:laf:0.8.0:*:*:*:*:*:*:* Versions 0.8.0 Vulnerable ·Laf
  • cpe:2.3:a:laf:laf:0.8.0:alpha0:*:*:*:*:*:* Versions 0.8.0 alpha0 Vulnerable ·Laf
  • cpe:2.3:a:laf:laf:0.8.0:alpha1:*:*:*:*:*:* Versions 0.8.0 alpha1 Vulnerable ·Laf
  • cpe:2.3:a:laf:laf:0.8.0:alpha10:*:*:*:*:*:* Versions 0.8.0 alpha10 Vulnerable ·Laf
  • cpe:2.3:a:laf:laf:0.8.0:alpha11:*:*:*:*:*:* Versions 0.8.0 alpha11 Vulnerable ·Laf
  • cpe:2.3:a:laf:laf:0.8.0:alpha2:*:*:*:*:*:* Versions 0.8.0 alpha2 Vulnerable ·Laf
  • cpe:2.3:a:laf:laf:0.8.0:alpha3:*:*:*:*:*:* Versions 0.8.0 alpha3 Vulnerable ·Laf
  • cpe:2.3:a:laf:laf:0.8.0:alpha4:*:*:*:*:*:* Versions 0.8.0 alpha4 Vulnerable ·Laf
  • cpe:2.3:a:laf:laf:0.8.0:alpha5:*:*:*:*:*:* Versions 0.8.0 alpha5 Vulnerable ·Laf
  • cpe:2.3:a:laf:laf:0.8.0:alpha6:*:*:*:*:*:* Versions 0.8.0 alpha6 Vulnerable ·Laf
  • cpe:2.3:a:laf:laf:0.8.0:alpha7:*:*:*:*:*:* Versions 0.8.0 alpha7 Vulnerable ·Laf
  • cpe:2.3:a:laf:laf:0.8.0:alpha8:*:*:*:*:*:* Versions 0.8.0 alpha8 Vulnerable ·Laf
  • cpe:2.3:a:laf:laf:0.8.0:alpha9:*:*:*:*:*:* Versions 0.8.0 alpha9 Vulnerable ·Laf
  • cpe:2.3:a:laf:laf:0.8.1:*:*:*:*:*:*:* Versions 0.8.1 Vulnerable ·Laf
  • cpe:2.3:a:laf:laf:0.8.2:*:*:*:*:*:*:* Versions 0.8.2 Vulnerable ·Laf
  • cpe:2.3:a:laf:laf:0.8.3:*:*:*:*:*:*:* Versions 0.8.3 Vulnerable ·Laf
  • cpe:2.3:a:laf:laf:0.8.4:*:*:*:*:*:*:* Versions 0.8.4 Vulnerable ·Laf
  • cpe:2.3:a:laf:laf:0.8.5:*:*:*:*:*:*:* Versions 0.8.5 Vulnerable ·Laf
  • cpe:2.3:a:laf:laf:0.8.5:alpha0:*:*:*:*:*:* Versions 0.8.5 alpha0 Vulnerable ·Laf
  • cpe:2.3:a:laf:laf:0.8.6:*:*:*:*:*:*:* Versions 0.8.6 Vulnerable ·Laf
  • cpe:2.3:a:laf:laf:0.8.7:*:*:*:*:*:*:* Versions 0.8.7 Vulnerable ·Laf
  • cpe:2.3:a:laf:laf:0.8.7:alpha0:*:*:*:*:*:* Versions 0.8.7 alpha0 Vulnerable ·Laf
  • cpe:2.3:a:laf:laf:0.8.7:alpha1:*:*:*:*:*:* Versions 0.8.7 alpha1 Vulnerable ·Laf
  • cpe:2.3:a:laf:laf:0.8.7:alpha2:*:*:*:*:*:* Versions 0.8.7 alpha2 Vulnerable ·Laf
  • cpe:2.3:a:laf:laf:0.8.7:alpha3:*:*:*:*:*:* Versions 0.8.7 alpha3 Vulnerable ·Laf
  • cpe:2.3:a:laf:laf:0.8.8:*:*:*:*:*:*:* Versions 0.8.8 Vulnerable ·Laf
  • cpe:2.3:a:laf:laf:0.8.9:*:*:*:*:*:*:* Versions 0.8.9 Vulnerable ·Laf
  • cpe:2.3:a:laf:laf:0.8.10:*:*:*:*:*:*:* Versions 0.8.10 Vulnerable ·Laf
  • cpe:2.3:a:laf:laf:0.8.11:*:*:*:*:*:*:* Versions 0.8.11 Vulnerable ·Laf
  • cpe:2.3:a:laf:laf:0.8.12:*:*:*:*:*:*:* Versions 0.8.12 Vulnerable ·Laf
  • cpe:2.3:a:laf:laf:0.8.13:*:*:*:*:*:*:* Versions 0.8.13 Vulnerable ·Laf
  • cpe:2.3:a:laf:laf:1.0.0:alpha0:*:*:*:*:*:* Versions 1.0.0 alpha0 Vulnerable ·Laf
  • cpe:2.3:a:laf:laf:1.0.0:alpha1:*:*:*:*:*:* Versions 1.0.0 alpha1 Vulnerable ·Laf
  • cpe:2.3:a:laf:laf:1.0.0:alpha2:*:*:*:*:*:* Versions 1.0.0 alpha2 Vulnerable ·Laf
  • cpe:2.3:a:laf:laf:1.0.0:alpha3:*:*:*:*:*:* Versions 1.0.0 alpha3 Vulnerable ·Laf
  • cpe:2.3:a:laf:laf:1.0.0:alpha4:*:*:*:*:*:* Versions 1.0.0 alpha4 Vulnerable ·Laf
  • cpe:2.3:a:laf:laf:1.0.0:alpha5:*:*:*:*:*:* Versions 1.0.0 alpha5 Vulnerable ·Laf
  • cpe:2.3:a:laf:laf:1.0.0:alpha6:*:*:*:*:*:* Versions 1.0.0 alpha6 Vulnerable ·Laf
  • cpe:2.3:a:laf:laf:1.0.0:beta0:*:*:*:*:*:* Versions 1.0.0 beta0 Vulnerable ·Laf
  • cpe:2.3:a:laf:laf:1.0.0:beta1:*:*:*:*:*:* Versions 1.0.0 beta1 Vulnerable ·Laf
  • cpe:2.3:a:laf:laf:1.0.0:beta10:*:*:*:*:*:* Versions 1.0.0 beta10 Vulnerable ·Laf
  • cpe:2.3:a:laf:laf:1.0.0:beta11:*:*:*:*:*:* Versions 1.0.0 beta11 Vulnerable ·Laf
  • cpe:2.3:a:laf:laf:1.0.0:beta12:*:*:*:*:*:* Versions 1.0.0 beta12 Vulnerable ·Laf
  • cpe:2.3:a:laf:laf:1.0.0:beta13:*:*:*:*:*:* Versions 1.0.0 beta13 Vulnerable ·Laf
  • cpe:2.3:a:laf:laf:1.0.0:beta2:*:*:*:*:*:* Versions 1.0.0 beta2 Vulnerable ·Laf
  • cpe:2.3:a:laf:laf:1.0.0:beta3:*:*:*:*:*:* Versions 1.0.0 beta3 Vulnerable ·Laf
  • cpe:2.3:a:laf:laf:1.0.0:beta4:*:*:*:*:*:* Versions 1.0.0 beta4 Vulnerable ·Laf
  • cpe:2.3:a:laf:laf:1.0.0:beta5:*:*:*:*:*:* Versions 1.0.0 beta5 Vulnerable ·Laf
  • cpe:2.3:a:laf:laf:1.0.0:beta6:*:*:*:*:*:* Versions 1.0.0 beta6 Vulnerable ·Laf
  • cpe:2.3:a:laf:laf:1.0.0:beta7:*:*:*:*:*:* Versions 1.0.0 beta7 Vulnerable ·Laf
  • cpe:2.3:a:laf:laf:1.0.0:beta8:*:*:*:*:*:* Versions 1.0.0 beta8 Vulnerable ·Laf
  • cpe:2.3:a:laf:laf:1.0.0:beta9:*:*:*:*:*:* Versions 1.0.0 beta9 Vulnerable ·Laf

Remediation

  • Fix · CNA laf (labring) Fixed in 1.0.0-beta13

Timeline

  1. 2026-10-02 Threatist record created from CVE-2023-48225

References

Exploit 1

Other 2

  • TI-2026-30610 FastGPT: Unauthenticated Remote Code Execution (RCE) via code-server Misconfiguration in agent-sandbox CVSS 3.1CRITICAL 9.8
  • TI-2026-48466 FastGPT: Unauthenticated WeChat channel hijack and denial of service via shareId-only authorization CVSS 4.0CRITICAL 9.3
  • TI-2026-44161 FastGPT: Unauthenticated cross-tenant data access via forgeable plugin-invoke JWT (default INVOKE_TOKEN_SECRET='token') CVSS 4.0HIGH 8.8
  • TI-2026-44148 Incorrect authorization in labring FastGPT CVSS 3.1HIGH 7.7
  • TI-2026-39440 FastGPT: SSRF in HTTP-tool OpenAPI schema importer via SwaggerParser $ref (bypasses the isInternalAddress guard) CVSS 3.1HIGH 7.7
  • TI-2026-30646 FastGPT: Uncontrolled Resource Consumption leading to Sandbox Exhaustion CVSS 4.0MEDIUM 6.3
See all 18 →

Sources

This product uses the NVD API but is not endorsed or certified by the NVD. Sources and licences