Skip to content
Ccubefs
Products
| Product | CVEs | Exploited | Latest |
| cubefs | 5 | – | Jan 3, 2024 |
Exploited and recent CVEs
-
CVE-2023-46742
Medium 4.8
CubeFS leaks users key in logs
0.3%
-
CVE-2023-46741
Medium 4.8
CubeFS leaks magic secret key when starting Blobstore access service
0.3%
-
CVE-2023-46740
Medium 6.5
Insecure random string generator used for sensitive data
0.4%
-
CVE-2023-46739
Medium 6.5
Timing attack can leak user passwords
0.4%
-
CVE-2023-46738
Medium 6.5
Authenticated users can crash the CubeFS servers with maliciously crafted requests
0.6%