CVE-2024-5552

kubeflow/kubeflow is vulnerable to a Regular Expression Denial of Service (ReDoS) attack due to inefficient regular expression complexity in its email validation mechanism. An attacker can remotely exploit this vulnerability without authentication by providing specially crafted input that causes the application to consume an excessive amount of CPU resources. This vulnerability affects the latest version of kubeflow/kubeflow, specifically within the centraldashboard-angular backend component. The impact of exploiting this vulnerability includes resource exhaustion, and service disruption.

• CWE-1333

• https://huntr.com/bounties/0c1d6432-f385-4c54-beea-9f8c677def5bExploit, Third Party Advisory
• https://huntr.com/bounties/0c1d6432-f385-4c54-beea-9f8c677def5bExploit, Third Party Advisory

Published

Jun 6, 2024

Last Modified

Jun 17, 2026

Status

Modified

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2024-55511A null pointer dereference vulnerability in Macrium Reflect …7.8
• CVE-2024-55513A vulnerability was found in Raisecom MSG1200, MSG2100E, MSG…9.1
• CVE-2024-55514A vulnerability was found in Raisecom MSG1200, MSG2100E, MSG…6.3
• CVE-2024-55515A vulnerability was found in Raisecom MSG1200, MSG2100E, MSG…9.8
• CVE-2024-55516A vulnerability was found in Raisecom MSG1200, MSG2100E, MSG…9.1
• CVE-2024-55517An issue was discovered in the Interllect Core Search in Pol…8.8
• CVE-2024-55529Z-BlogPHP 1.7.3 is vulnerable to arbitrary code execution vi…9.8
• CVE-2024-5553The Premium Addons for Elementor plugin for WordPress is vul…5.4
• CVE-2024-55532Improper Neutralization of Formula Elements in Export CSV fe…9.8
• CVE-2024-55538Sensitive information disclosure due to missing authenticati…4
• CVE-2024-55539Weak algorithm used to sign RPM package. The following produ…2.5
• CVE-2024-5554The Element Pack Elementor Addons (Header Footer, Template L…6.4