cbcvebase.

Flyteorg Flyteconsole vulnerabilities

1 known vulnerability affecting flyteorg/flyteconsole.

Total CVEs
1
CISA KEV
0
Public exploits
1
Exploited in wild
0
Severity breakdown
HIGH1

Vulnerabilities

Page 1 of 1
CVE-2022-24856P2HIGHCVSS 7.5PoCfixed in 0.52.02022-05-17
CVE-2022-24856 [HIGH] CWE-918 CVE-2022-24856: FlyteConsole is the web user interface for the Flyte platform. FlyteConsole prior to version 0.52.0 FlyteConsole is the web user interface for the Flyte platform. FlyteConsole prior to version 0.52.0 is vulnerable to server-side request forgery (SSRF) when FlyteConsole is open to the general internet. An attacker can exploit any user of a vulnerable instance to access the internal metadata server or other unauthenticated URLs. Passing of headers to a
nvd
Flyteorg Flyteconsole vulnerabilities | cvebase