Fit2Cloud Koko vulnerabilities

1 vulnerability

Known vulnerabilities in Fit2Cloud Koko, newest first, with CVSS severity, EPSS, KEV listings, ransomware use and the affected versions.

RoutineCVE-2023-28110jumpserver +2 moreJumpServer Koko vulnerable to Command Injection for Kubernetes ConnectionJumpserver is a popular open source bastion host, and Koko is a Jumpserver component that is the Go version of coco, refactoring coco's SSH/SFTP service and Web Terminal service. Prior to version 2.28.8, using illegal tokens to connect to a Kubernetes cluster through Koko can result in the execution of dangerous commands that may disrupt the Koko container environment and affect normal usage. The vulnerability has been fixed in v2.28.8.CVSS9.9CriticalEPSS0.85%