VDB
CVE-2023-0923
CVE-2023-0923
PUBLISHED
CVSS 8 HIGH
A flaw was found in the Kubernetes service for notebooks in RHODS, where it does not prevent pods from other namespaces and applications from making requests to the Jupyter API. This flaw can lead to file content exposure and other issues.
EPSS 0.94% · 60.5th percentile
Risk Scores
CVSS 3.1
8
CVSS:3.1/AV:A/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
EPSS Score
0.94%
60.5th percentile
Affected Products
| Vendor | Product | Versions |
|---|---|---|
| Red Hat | RHODS-1.22-RHEL-8 | v1.22.1-3 |
| redhat | openshift_data_science | 1.22 |
Timeline
- Sep 15, 2023 CVE Published
- Sep 16, 2023 EPSS Score
- Oct 19, 2023 EPSS Score
- Nov 21, 2023 EPSS Score
- Dec 24, 2023 EPSS Score
- Jan 27, 2024 EPSS Score
- Feb 29, 2024 EPSS Score
- Apr 2, 2024 EPSS Score
- May 5, 2024 EPSS Score
- Jun 8, 2024 EPSS Score
- Jul 11, 2024 EPSS Score
- Aug 2, 2024 CVE Updated