CVE-2023-50253

high-risk

Published 2024-01-03

Laf is a cloud development platform. In the Laf version design, the log uses communication with k8s to quickly retrieve logs from the container without the need for additional storage. However, in version 1.0.0-beta.13 and prior, this interface does not verify the permissions of the pod, which allows authenticated users to obtain any pod logs under the same namespace through this method, thereby obtaining sensitive information printed in the logs. As of time of publication, no known patched versions exist.

Do I need to act?

0.05% chance of exploitation

EPSS score — low exploit probability

Not on CISA KEV list

No confirmed active exploitation reported to CISA

Patch status unknown

Check vendor advisories for fix availability and mitigation guidance

CVSS 9.6/10 Critical

NETWORK / LOW complexity

Affected Products (20)

Laf

Affected Vendors

Laf

References (4)

Third Party Advisory https://github.com/labring/laf/pull/1468

Exploit https://github.com/labring/laf/security/advisories/GHSA-g9c8-wh35-g75f

Third Party Advisory https://github.com/labring/laf/pull/1468

Exploit https://github.com/labring/laf/security/advisories/GHSA-g9c8-wh35-g75f

/ 100

high-risk

Severity 32/34 · Critical

Exploitability 0/34 · Minimal

Exposure 32/34 · Critical