CU
Product
cubefs
5
CVEs
0
On KEV
9.8
Max CVSS
0
New 30D
Severity mix
Critical 2High 0Medium 3Low 0
Watch
Add cubefs to your stack to get only the CVEs that touch what you run.
| CVE | CVSS | Published | Summary · affected versions |
|---|---|---|---|
| CVE-2023-46741 | 9.8 | Jan 3 | CubeFS leaks magic secret key when starting Blobstore access service Affected: < 3.3.1 |
| CVE-2023-46740 | 9.8 | Jan 3 | Insecure random string generator used for sensitive data Affected: < 3.3.1 |
| CVE-2023-46742 | 6.5 | Jan 3 | CubeFS leaks users key in logs Affected: < 3.3.1 |
| CVE-2023-46738 | 6.5 | Jan 3 | Authenticated users can crash the CubeFS servers with maliciously crafted requests Affected: < 3.3.1 |
| CVE-2023-46739 | 5.9 | Jan 3 | Timing attack can leak user passwords Affected: < 3.3.1 |
Showing 5