GMS-2023-4: Duplicate of ./go/github.com/KubeOperator/KubeOperator/CVE-2023-22480.yml

January 9, 2023

API interfaces with unauthorized access will leak sensitive information via /api/v1/clusters/kubeconfig/

References

github.com/KubeOperator/KubeOperator/security/advisories/GHSA-jxgp-jgh3-8jc8
github.com/advisories/GHSA-jxgp-jgh3-8jc8

Code Behaviors & Features

Detect and mitigate GMS-2023-4 with GitLab Dependency Scanning

Secure your software supply chain by verifying that all open source dependencies used in your projects contain no disclosed vulnerabilities. Learn more about Dependency Scanning →