Read the docs

Vulnerabilities

Filters

Reset all
Threatist priority
Signals
Fix status
Impact type
Attack vector
Requirements
Product

Products as named in CPE, with their records.

Published
Weakness (CWE)
1 selected

3 records

Vendor: karmada-io Clear all filters
TI-2025-38904 CVE-2025-62714 · GHSA-5qjg-9mjh-4r92

Karmada Dashboard API Unauthorized Access Vulnerability

Priority MEDIUM 44

Karmada Dashboard is a general-purpose, web-based control panel for Karmada which is a multi-cluster management project.

CVSS 4.0HIGH 8.7 Network No auth No interaction EPSS 0.00494 Published 2025-10-24 Fixed in 0.2.0 CWE-862
TI-2024-37401 CVE-2024-56514 · GHSA-cwrh-575j-8vr3

Karmada Tar Slips in CRDs archive extraction

Priority LOW 25

Karmada is a Kubernetes management system that allows users to run cloud-native applications across multiple Kubernetes clusters and clouds.

CVSS 4.0MEDIUM 5.3 Network No auth User interaction EPSS 0.00753 Published 2025-01-03 Fixed in 1.12.0 CWE-22
TI-2024-37400 CVE-2024-56513 · GHSA-mg7w-c9x2-xh7r

Karmada PULL Mode Cluster Privilege Escalation

Priority MEDIUM 40

Karmada is a Kubernetes management system that allows users to run cloud-native applications across multiple Kubernetes clusters and clouds.

CVSS 4.0HIGH 8.7 Network Low privileges No interaction EPSS 0.00491 Published 2025-01-03 Fixed in 1.12.0 CWE-266