CVE-2023-22479 (published 2023-01-10T20:34:08.097Z)
KubePi is a modern Kubernetes panel. A session fixation attack allows an attacker to hijack a legitimate user session, versions 1.6.3 and below are susceptible. A patch will be released in version 1.6.4.
Affected products: Vendor: KubeOperator
Product: KubePi
Versions: <= 1.6.3