We use these services and cookies to improve your user experience. You may opt out if you wish, however, this may limit some features on this site.
Please see our statement on Data Privacy.
There exists a stored XSS Vulnerability in Kubeflow Pipeline View web UI. The Kubeflow Web UI allows to create new pipelines. When creating a new pipeline, it is possible to add a description. The description field allows html tags, which are not filtered properly. Leading to a stored XSS. We recommend upgrading past commit 930c35f1c543998e60e8d648ce93185c9b5dbe8d
Reserved 2024-10-04 | Published 2024-11-18 | Updated 2024-11-21 | Assigner GoogleCWE-79 Improper Neutralization of Input During Web Page Generation (XSS or 'Cross-site Scripting')
Philipp Schneider
github.com/kubeflow/pipelines/pull/10315
Support options