Threat database

1 threat

Threat database
Severity	CVSS	Signals	Threat	Source	Published	Score and star
High	8.7	EPSS 0.5%	CVE-2025-62714dashboard · Missing Authorization High8.7EPSS 0.5%2025-10-24CVE Database V5CVE-2025-62714 Karmada Dashboard versions prior to 0.2.0 contain an authentication bypass vulnerability in their backend API endpoints. These endpoints do not enforce authentication, allowing unauthenticated users with network access to retrieve sensitive cluster information such as Secrets and Services. The web UI requires JWT authentication, but the API itself is exposed without checks. This vulnerability is identified as CWE-862 and has a high severity score of 8.7. EPSS 0.5%Vulnerability karmada-io #cwe-862	CVE Database V5	2025-10-24

Showing 1–1 of 1 result