CVE-2023-6571: Cross-site Scripting (XSS) - Reflected in kubeflow/kubeflow
Published Dec 14, 2023
·Updated
Cross-site Scripting (XSS) - Reflected in kubeflow/kubeflow
Affected Software
1 affected component
kubeflow kubeflow=1.7.0
Event History
Dec 14, 2023
CVE Published
01:00 PM
Data Sourced
01:00 PM
DescriptionSeverityWeakness
Frequently Asked Questions
1
What is the severity of CVE-2023-6571?
CVE-2023-6571 has a moderate severity rating due to the risk of reflected cross-site scripting (XSS) attacks.
2
How do I fix CVE-2023-6571?
To fix CVE-2023-6571, upgrade kubeflow to version 1.7.1 or later where the vulnerability has been addressed.
3
What type of vulnerability is CVE-2023-6571?
CVE-2023-6571 is a reflected cross-site scripting (XSS) vulnerability in kubeflow.
4
Which version of kubeflow is affected by CVE-2023-6571?
CVE-2023-6571 affects kubeflow version 1.7.0.
5
What can an attacker do with CVE-2023-6571?
An attacker can exploit CVE-2023-6571 to execute arbitrary JavaScript in the context of the user's session.