cubefs

Products

ProductCVEsExploitedLatest
cubefs5–Jan 3, 2024

Exploited and recent CVEs

  • CVE-2023-46742 Medium 4.8 CubeFS leaks users key in logs 0.3%
  • CVE-2023-46741 Medium 4.8 CubeFS leaks magic secret key when starting Blobstore access service 0.3%
  • CVE-2023-46740 Medium 6.5 Insecure random string generator used for sensitive data 0.4%
  • CVE-2023-46739 Medium 6.5 Timing attack can leak user passwords 0.4%
  • CVE-2023-46738 Medium 6.5 Authenticated users can crash the CubeFS servers with maliciously crafted requests 0.6%