What’s Vulnerable › Products

cubefs vulnerabilities

6 known vulnerabilities, 0 confirmed exploited in the wild (CISA KEV), 0 published in the last 12 months.

Check whether your cubefs version is affected

Latest cubefs vulnerabilities

• CVE-2023-46742 — CubeFS leaks users key in logs (CVSS 6.5)
• CVE-2023-46741 — CubeFS leaks magic secret key when starting Blobstore access service (CVSS 9.8)
• CVE-2023-46740 — Insecure random string generator used for sensitive data (CVSS 9.8)
• CVE-2023-46739 — Timing attack can leak user passwords (CVSS 5.9)
• CVE-2023-46738 — Authenticated users can crash the CubeFS servers with maliciously crafted requests (CVSS 6.5)
• CVE-2023-30512 — (CVSS 6.5)