Cpe:2.3:a:kubesphere:kubesphere:*:*:*:*:*:*:*:*

KubeSphere versions up to 4.1.3 contain a server-side request forgery (SSRF) vulnerability in the git credential verification endpoint, allowing authenticated attackers to exfiltrate Kubernetes Secrets.