CVE-2023-37916

KubePi is an opensource kubernetes management panel. The endpoint /kubepi/api/v1/users/search?pageNum=1&&pageSize=10 leak password hash of any user (including admin). A sufficiently motivated attacker may be able to crack leaded password hashes. This issue has been addressed in version 1.6.5. Users are advised to upgrade. There are no known workarounds for this vulnerability.

• CWE-200

• https://github.com/1Panel-dev/KubePi/security/advisories/GHSA-87f6-8gr7-pc6hExploit, Third Party Advisory
• https://github.com/1Panel-dev/KubePi/security/advisories/GHSA-87f6-8gr7-pc6hExploit, Third Party Advisory

Published

Jul 21, 2023

Last Modified

Jun 17, 2026

Status

Modified

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2023-37910XWiki Platform is a generic wiki platform offering runtime s…8.1
• CVE-2023-37911XWiki Platform is a generic wiki platform offering runtime s…6.5
• CVE-2023-37912XWiki Rendering is a generic Rendering system that converts …8.8
• CVE-2023-37913XWiki Platform is a generic wiki platform offering runtime s…8.8
• CVE-2023-37914XWiki Platform is a generic wiki platform offering runtime s…8.8
• CVE-2023-37915OpenDDS is an open source C++ implementation of the Object M…7.5
• CVE-2023-37917KubePi is an opensource kubernetes management panel. A norma…8.8
• CVE-2023-37918Dapr is a portable, event-driven, runtime for building distr…7.5
• CVE-2023-37919Cal.com is open-source scheduling software. A vulnerability …5.4
• CVE-2023-3792A vulnerability was found in Beijing Netcon NS-ASG 6.3. It h…6.5
• CVE-2023-37920Certifi is a curated collection of Root Certificates for val…9.8
• CVE-2023-37921Multiple arbitrary write vulnerabilities exist in the VCD so…7.8