CVE-2023-37917: Privilege Escalation in kubepi
Summary A normal user has permission to create/update users, they can become admin by editing the isadmin value in the request
PoC Change the value of the isadmin field in the request to true: https://drive.google.com/file/d/1e8XJbIFIDXaFiL-dqn0a0b6u7o3CwqSG/preview
Impact Elevate user privileges
Other sources
KubePi is an opensource kubernetes management panel. A normal user has permission to create/update users, they can become admin by editing the isadmin value in the request. As a result any user may take administrative control of KubePi. This issue has been addressed in version 1.6.5. Users are advised to upgrade. There are no known workarounds for this vulnerability.
Affected Software
Remediation
Recommended actions to resolve this vulnerability, in priority order.
- Upgrade
Upgrade
go/github.com/KubeOperator/kubepito a version that resolves this vulnerability.Fixed in 1.6.5 - Upgrade
Upgrade to a fixed release to a version that resolves this vulnerability.
Fixed in 1.6.5
Event History
Frequently Asked Questions
What is CVE-2023-37917?
CVE-2023-37917 is a vulnerability in KubePi, an opensource Kubernetes management panel, that allows a normal user to become an admin by editing the 'isadmin' value in the request.
How can a user exploit CVE-2023-37917?
A user can exploit CVE-2023-37917 by creating or updating users and changing the 'isadmin' value to gain administrative control of KubePi.
What is the severity of CVE-2023-37917?
CVE-2023-37917 has a severity rating of critical with a value of 9 out of 10.
How can I fix CVE-2023-37917?
You can fix CVE-2023-37917 by updating KubePi to version 1.6.5, which addresses the vulnerability.
Where can I find more information about CVE-2023-37917?
You can find more information about CVE-2023-37917 in the following references: - [GitHub Security Advisory](https://github.com/1Panel-dev/KubePi/security/advisories/GHSA-757p-vx43-fp9r) - [Google Drive File](https://drive.google.com/file/d/1e8XJbIFIDXaFiL-dqn0a0b6u7o3CwqSG/preview) - [KubePi Release Tag](https://github.com/1Panel-dev/KubePi/releases/tag/v1.6.5)