An Insecure Direct Object Reference (IDOR) vulnerability in KubeSphere allows low-privileged authenticated attackers to access sensitive resources without proper authorization checks.
NOTE: A fix is expected in v4.1.3 in January 2025.
{ "review_status": "REVIEWED", "url": "https://pkg.go.dev/vuln/GO-2024-3248" }