[{"data":1,"prerenderedAt":-1},["ShallowReactive",2],{"cve-CVE-2024-46528":3},{"id":4,"cve_id":5,"euvd_id":6,"summary":7,"published":8,"cvss_data":9,"is_remote":20,"cwes":21,"cpes":23,"technologies":25,"references":27,"score":38,"epss_score":39,"epss_percentile":40,"is_kev":41,"cisa_kev_date_added":42,"cisa_kev_due_date":42,"cisa_ssvc":43,"attack_mappings":53,"exploits":60},23891,"CVE-2024-46528","EUVD-2024-3090","KubeSphere IDOR vulnerability\n\nAn Insecure Direct Object Reference (IDOR) vulnerability in KubeSphere v3.4.1 and v4.1.1 allows low-privileged authenticated attackers to access sensitive resources without proper authorization checks.","2024-10-14T18:30:00Z",{"cvss_v3.1":10},{"scope":11,"version":12,"baseScore":13,"attackVector":14,"baseSeverity":15,"vectorString":16,"integrityImpact":17,"userInteraction":17,"attackComplexity":18,"availabilityImpact":17,"privilegesRequired":18,"confidentialityImpact":19},"UNCHANGED","3.1",6.5,"NETWORK","MEDIUM","CVSS:3.1\u002FAV:N\u002FAC:L\u002FPR:L\u002FUI:N\u002FS:U\u002FC:H\u002FI:N\u002FA:N","NONE","LOW","HIGH",true,[22],"CWE-639",[24],"cpe:2.3:a:kubesphere:kubesphere:*:*:*:*:*:*:*:*",[26],"Kubesphere Kubesphere",[28,29,30,31,32,33,34,35,36,37],"https:\u002F\u002Fgithub.com\u002Fkubesphere\u002Fkubesphere\u002Fissues\u002F6227","https:\u002F\u002Fkubesphere.io\u002F","https:\u002F\u002Fokankurtulus.com.tr\u002F2024\u002F09\u002F09\u002Fidor-vulnerability-in-kubesphere\u002F","https:\u002F\u002Fwww.kubesphere.io\u002Fnews\u002Fkubesphere-cve-2024-46528\u002F","https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2024-46528","https:\u002F\u002Fgithub.com\u002Fkubesphere\u002Fkubesphere","https:\u002F\u002Fkubesphere.io","https:\u002F\u002Fokankurtulus.com.tr\u002F2024\u002F09\u002F09\u002Fidor-vulnerability-in-kubesphere","https:\u002F\u002Fpkg.go.dev\u002Fvuln\u002FGO-2024-3248","https:\u002F\u002Fwww.kubesphere.io\u002Fnews\u002Fkubesphere-cve-2024-46528",0.53,0.01584,0.75384,false,null,{"timestamp":44,"automatable":45,"tech_impact":46,"exploitation":47,"cisa_decision":48,"cisa_remediation_timeline":52},"2024-10-15T14:45:11.748010Z","no","partial","poc",{"vector":49,"decision":50,"priority":51},"CISAv1\u002FE:P\u002FA:N\u002FT:P\u002FM:H\u002F2026-10-25T19:07:27.334337\u002F","track_star","medium","60D",[54],{"name":55,"source":56,"tactics":57,"technique_id":59},"Exploit Public-Facing Application","attack_vector",[58],"initial-access","T1190",[]]