GHSA-87f6-8gr7-pc6h
GitHub Security Advisory
KubePi may leak password hash of any user
✓ GitHub Reviewed
MODERATE
Has CVE
Advisory Details
### Summary
http://kube.pi/kubepi/api/v1/users/search?pageNum=1&&pageSize=10 leak password of any user (including admin). This leads to password crack attack
### PoC
https://drive.google.com/file/d/1ksdawJ1vShRJyT3wAgpqVmz-Ls6hMA7M/preview
### Impact
- Leaking confidential information.
- Can lead to password cracking attacks
Affected Packages
Go
github.com/KubeOperator/kubepi
Affected versions:
0
(fixed in 1.6.5)
Related CVEs
Key Information
5.0
/10
Dataset
Last updated: July 12, 2025 6:29 AM
Data from GitHub Advisory Database. This information is provided for research and educational purposes.