CVEDB API

Vulnerabilities

Vulnerable Software

Vulnerability Details CVE-2022-24856

FlyteConsole is the web user interface for the Flyte platform. FlyteConsole prior to version 0.52.0 is vulnerable to server-side request forgery (SSRF) when FlyteConsole is open to the general internet. An attacker can exploit any user of a vulnerable instance to access the internal metadata server or other unauthenticated URLs. Passing of headers to an unauthorized actor may occur. The patch for this issue deletes the entire `cors_proxy`, as this is not required for console anymore. A patch is available in FlyteConsole version 0.52.0. Disable FlyteConsole availability on the internet as a workaround.

Exploit prediction scoring system (EPSS) score

EPSS Score 0.828

EPSS Ranking 99.2%

CVSS Severity

CVSS v3 Score 9.1

CVSS v2 Score 5.0

References

Products affected by CVE-2022-24856

Flyte » Flyte Console » Version: N/A

cpe:2.3:a:flyte:flyte_console:-
Flyte » Flyte Console » Version: 0.1.0

cpe:2.3:a:flyte:flyte_console:0.1.0
Flyte » Flyte Console » Version: 0.10.0

cpe:2.3:a:flyte:flyte_console:0.10.0
Flyte » Flyte Console » Version: 0.11.0

cpe:2.3:a:flyte:flyte_console:0.11.0
Flyte » Flyte Console » Version: 0.12.0

cpe:2.3:a:flyte:flyte_console:0.12.0
Flyte » Flyte Console » Version: 0.12.1

cpe:2.3:a:flyte:flyte_console:0.12.1
Flyte » Flyte Console » Version: 0.13.0

cpe:2.3:a:flyte:flyte_console:0.13.0
Flyte » Flyte Console » Version: 0.13.1

cpe:2.3:a:flyte:flyte_console:0.13.1
Flyte » Flyte Console » Version: 0.13.2

cpe:2.3:a:flyte:flyte_console:0.13.2
Flyte » Flyte Console » Version: 0.14.0

cpe:2.3:a:flyte:flyte_console:0.14.0
Flyte » Flyte Console » Version: 0.15.0

cpe:2.3:a:flyte:flyte_console:0.15.0
Flyte » Flyte Console » Version: 0.15.1

cpe:2.3:a:flyte:flyte_console:0.15.1
Flyte » Flyte Console » Version: 0.16.0

cpe:2.3:a:flyte:flyte_console:0.16.0
Flyte » Flyte Console » Version: 0.16.1

cpe:2.3:a:flyte:flyte_console:0.16.1
Flyte » Flyte Console » Version: 0.16.2

cpe:2.3:a:flyte:flyte_console:0.16.2
Flyte » Flyte Console » Version: 0.17.0

cpe:2.3:a:flyte:flyte_console:0.17.0
Flyte » Flyte Console » Version: 0.17.1

cpe:2.3:a:flyte:flyte_console:0.17.1
Flyte » Flyte Console » Version: 0.17.2

cpe:2.3:a:flyte:flyte_console:0.17.2
Flyte » Flyte Console » Version: 0.17.3

cpe:2.3:a:flyte:flyte_console:0.17.3
Flyte » Flyte Console » Version: 0.17.4

cpe:2.3:a:flyte:flyte_console:0.17.4
Flyte » Flyte Console » Version: 0.17.5

cpe:2.3:a:flyte:flyte_console:0.17.5
Flyte » Flyte Console » Version: 0.17.6

cpe:2.3:a:flyte:flyte_console:0.17.6
Flyte » Flyte Console » Version: 0.17.7

cpe:2.3:a:flyte:flyte_console:0.17.7
Flyte » Flyte Console » Version: 0.17.8

cpe:2.3:a:flyte:flyte_console:0.17.8
Flyte » Flyte Console » Version: 0.18.0

cpe:2.3:a:flyte:flyte_console:0.18.0
Flyte » Flyte Console » Version: 0.19.0

cpe:2.3:a:flyte:flyte_console:0.19.0
Flyte » Flyte Console » Version: 0.19.1

cpe:2.3:a:flyte:flyte_console:0.19.1
Flyte » Flyte Console » Version: 0.19.2

cpe:2.3:a:flyte:flyte_console:0.19.2
Flyte » Flyte Console » Version: 0.19.3

cpe:2.3:a:flyte:flyte_console:0.19.3
Flyte » Flyte Console » Version: 0.19.4

cpe:2.3:a:flyte:flyte_console:0.19.4
Flyte » Flyte Console » Version: 0.19.5

cpe:2.3:a:flyte:flyte_console:0.19.5
Flyte » Flyte Console » Version: 0.19.6

cpe:2.3:a:flyte:flyte_console:0.19.6
Flyte » Flyte Console » Version: 0.19.7

cpe:2.3:a:flyte:flyte_console:0.19.7
Flyte » Flyte Console » Version: 0.2.0

cpe:2.3:a:flyte:flyte_console:0.2.0
Flyte » Flyte Console » Version: 0.2.1

cpe:2.3:a:flyte:flyte_console:0.2.1
Flyte » Flyte Console » Version: 0.20.0

cpe:2.3:a:flyte:flyte_console:0.20.0
Flyte » Flyte Console » Version: 0.20.1

cpe:2.3:a:flyte:flyte_console:0.20.1
Flyte » Flyte Console » Version: 0.21.0

cpe:2.3:a:flyte:flyte_console:0.21.0
Flyte » Flyte Console » Version: 0.22.0

cpe:2.3:a:flyte:flyte_console:0.22.0
Flyte » Flyte Console » Version: 0.22.1

cpe:2.3:a:flyte:flyte_console:0.22.1
Flyte » Flyte Console » Version: 0.23.0

cpe:2.3:a:flyte:flyte_console:0.23.0
Flyte » Flyte Console » Version: 0.23.1

cpe:2.3:a:flyte:flyte_console:0.23.1
Flyte » Flyte Console » Version: 0.24.0

cpe:2.3:a:flyte:flyte_console:0.24.0
Flyte » Flyte Console » Version: 0.25.0

cpe:2.3:a:flyte:flyte_console:0.25.0
Flyte » Flyte Console » Version: 0.25.1

cpe:2.3:a:flyte:flyte_console:0.25.1
Flyte » Flyte Console » Version: 0.25.2

cpe:2.3:a:flyte:flyte_console:0.25.2
Flyte » Flyte Console » Version: 0.25.3

cpe:2.3:a:flyte:flyte_console:0.25.3
Flyte » Flyte Console » Version: 0.25.4

cpe:2.3:a:flyte:flyte_console:0.25.4
Flyte » Flyte Console » Version: 0.26.0

cpe:2.3:a:flyte:flyte_console:0.26.0
Flyte » Flyte Console » Version: 0.27.0

cpe:2.3:a:flyte:flyte_console:0.27.0
Flyte » Flyte Console » Version: 0.27.1

cpe:2.3:a:flyte:flyte_console:0.27.1
Flyte » Flyte Console » Version: 0.27.2

cpe:2.3:a:flyte:flyte_console:0.27.2
Flyte » Flyte Console » Version: 0.28.0

cpe:2.3:a:flyte:flyte_console:0.28.0
Flyte » Flyte Console » Version: 0.28.1

cpe:2.3:a:flyte:flyte_console:0.28.1
Flyte » Flyte Console » Version: 0.28.2

cpe:2.3:a:flyte:flyte_console:0.28.2
Flyte » Flyte Console » Version: 0.28.3

cpe:2.3:a:flyte:flyte_console:0.28.3
Flyte » Flyte Console » Version: 0.29.0

cpe:2.3:a:flyte:flyte_console:0.29.0
Flyte » Flyte Console » Version: 0.29.1

cpe:2.3:a:flyte:flyte_console:0.29.1
Flyte » Flyte Console » Version: 0.29.2

cpe:2.3:a:flyte:flyte_console:0.29.2
Flyte » Flyte Console » Version: 0.3.0

cpe:2.3:a:flyte:flyte_console:0.3.0
Flyte » Flyte Console » Version: 0.3.1

cpe:2.3:a:flyte:flyte_console:0.3.1
Flyte » Flyte Console » Version: 0.3.2

cpe:2.3:a:flyte:flyte_console:0.3.2
Flyte » Flyte Console » Version: 0.30.0

cpe:2.3:a:flyte:flyte_console:0.30.0
Flyte » Flyte Console » Version: 0.31.0

cpe:2.3:a:flyte:flyte_console:0.31.0
Flyte » Flyte Console » Version: 0.31.1

cpe:2.3:a:flyte:flyte_console:0.31.1
Flyte » Flyte Console » Version: 0.31.2

cpe:2.3:a:flyte:flyte_console:0.31.2
Flyte » Flyte Console » Version: 0.31.3

cpe:2.3:a:flyte:flyte_console:0.31.3
Flyte » Flyte Console » Version: 0.31.4

cpe:2.3:a:flyte:flyte_console:0.31.4
Flyte » Flyte Console » Version: 0.32.0

cpe:2.3:a:flyte:flyte_console:0.32.0
Flyte » Flyte Console » Version: 0.33.0

cpe:2.3:a:flyte:flyte_console:0.33.0
Flyte » Flyte Console » Version: 0.33.1

cpe:2.3:a:flyte:flyte_console:0.33.1
Flyte » Flyte Console » Version: 0.34.0

cpe:2.3:a:flyte:flyte_console:0.34.0
Flyte » Flyte Console » Version: 0.35.0

cpe:2.3:a:flyte:flyte_console:0.35.0
Flyte » Flyte Console » Version: 0.36.0

cpe:2.3:a:flyte:flyte_console:0.36.0
Flyte » Flyte Console » Version: 0.37.0

cpe:2.3:a:flyte:flyte_console:0.37.0
Flyte » Flyte Console » Version: 0.37.1

cpe:2.3:a:flyte:flyte_console:0.37.1
Flyte » Flyte Console » Version: 0.38.0

cpe:2.3:a:flyte:flyte_console:0.38.0
Flyte » Flyte Console » Version: 0.39.0

cpe:2.3:a:flyte:flyte_console:0.39.0
Flyte » Flyte Console » Version: 0.39.1

cpe:2.3:a:flyte:flyte_console:0.39.1
Flyte » Flyte Console » Version: 0.4.0

cpe:2.3:a:flyte:flyte_console:0.4.0
Flyte » Flyte Console » Version: 0.40.0

cpe:2.3:a:flyte:flyte_console:0.40.0
Flyte » Flyte Console » Version: 0.41.0

cpe:2.3:a:flyte:flyte_console:0.41.0
Flyte » Flyte Console » Version: 0.42.0

cpe:2.3:a:flyte:flyte_console:0.42.0
Flyte » Flyte Console » Version: 0.42.1

cpe:2.3:a:flyte:flyte_console:0.42.1
Flyte » Flyte Console » Version: 0.43.0

cpe:2.3:a:flyte:flyte_console:0.43.0
Flyte » Flyte Console » Version: 0.44.0

cpe:2.3:a:flyte:flyte_console:0.44.0
Flyte » Flyte Console » Version: 0.45.0

cpe:2.3:a:flyte:flyte_console:0.45.0
Flyte » Flyte Console » Version: 0.46.0

cpe:2.3:a:flyte:flyte_console:0.46.0
Flyte » Flyte Console » Version: 0.47.0

cpe:2.3:a:flyte:flyte_console:0.47.0
Flyte » Flyte Console » Version: 0.47.1

cpe:2.3:a:flyte:flyte_console:0.47.1
Flyte » Flyte Console » Version: 0.47.2

cpe:2.3:a:flyte:flyte_console:0.47.2
Flyte » Flyte Console » Version: 0.47.3

cpe:2.3:a:flyte:flyte_console:0.47.3
Flyte » Flyte Console » Version: 0.48.0

cpe:2.3:a:flyte:flyte_console:0.48.0
Flyte » Flyte Console » Version: 0.49.0

cpe:2.3:a:flyte:flyte_console:0.49.0
Flyte » Flyte Console » Version: 0.5.0

cpe:2.3:a:flyte:flyte_console:0.5.0
Flyte » Flyte Console » Version: 0.5.1

cpe:2.3:a:flyte:flyte_console:0.5.1
Flyte » Flyte Console » Version: 0.5.2

cpe:2.3:a:flyte:flyte_console:0.5.2
Flyte » Flyte Console » Version: 0.5.3

cpe:2.3:a:flyte:flyte_console:0.5.3
Flyte » Flyte Console » Version: 0.50.0

cpe:2.3:a:flyte:flyte_console:0.50.0
Flyte » Flyte Console » Version: 0.50.1

cpe:2.3:a:flyte:flyte_console:0.50.1
Flyte » Flyte Console » Version: 0.50.2

cpe:2.3:a:flyte:flyte_console:0.50.2
Flyte » Flyte Console » Version: 0.50.3

cpe:2.3:a:flyte:flyte_console:0.50.3
Flyte » Flyte Console » Version: 0.50.4

cpe:2.3:a:flyte:flyte_console:0.50.4
Flyte » Flyte Console » Version: 0.51.0

cpe:2.3:a:flyte:flyte_console:0.51.0
Flyte » Flyte Console » Version: 0.51.1

cpe:2.3:a:flyte:flyte_console:0.51.1
Flyte » Flyte Console » Version: 0.51.2

cpe:2.3:a:flyte:flyte_console:0.51.2
Flyte » Flyte Console » Version: 0.51.3

cpe:2.3:a:flyte:flyte_console:0.51.3
Flyte » Flyte Console » Version: 0.6.0

cpe:2.3:a:flyte:flyte_console:0.6.0
Flyte » Flyte Console » Version: 0.7.0

cpe:2.3:a:flyte:flyte_console:0.7.0
Flyte » Flyte Console » Version: 0.7.1

cpe:2.3:a:flyte:flyte_console:0.7.1
Flyte » Flyte Console » Version: 0.7.2

cpe:2.3:a:flyte:flyte_console:0.7.2
Flyte » Flyte Console » Version: 0.7.3

cpe:2.3:a:flyte:flyte_console:0.7.3
Flyte » Flyte Console » Version: 0.8.0

cpe:2.3:a:flyte:flyte_console:0.8.0
Flyte » Flyte Console » Version: 0.8.1

cpe:2.3:a:flyte:flyte_console:0.8.1
Flyte » Flyte Console » Version: 0.9.0

cpe:2.3:a:flyte:flyte_console:0.9.0

Vulnerabilities

Vulnerable Software

Vulnerability Details CVE-2022-24856

Products

Pricing

Contact Us