Lucene search

@huntrdevCVE-2023-0780

HistoryFeb 11, 2023 - 2:20 a.m.

CVE-2023-0780

2023-02-1102:20:44

CWE-1021

@huntrdev

web.nvd.nist.gov

cve-2023-0780

github

repository

security vulnerability

nvd

CVSS3

5.4

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

REQUIRED

Scope

UNCHANGED

Confidentiality Impact

LOW

Integrity Impact

LOW

Availability Impact

NONE

CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:L/A:N

AI Score

4.4

Confidence

High

EPSS

0.001

Percentile

37.4%

JSON

Improper Restriction of Rendered UI Layers or Frames in GitHub repository cockpit-hq/cockpit prior to 2.3.9-dev.

Affected configurations

Nvd

Node

agentejocockpitRange<2.3.9

VendorProductVersionCPE
agentejocockpit*cpe:2.3:a:agentejo:cockpit:*:*:*:*:*:*:*:*

Vendor	Product	Version	CPE
agentejo	cockpit	*	cpe:2.3:a:agentejo:cockpit::::::::

CNA Affected

[
  {
    "vendor": "cockpit-hq",
    "product": "cockpit-hq/cockpit",
    "versions": [
      {
        "version": "unspecified",
        "lessThan": "2.3.9-dev",
        "status": "affected",
        "versionType": "custom"
      }
    ]
  }
]

References

github.com/cockpit-hq/cockpit/commit/8450bdf7e1dc23e9d88adf30a2aa9101c0c41720

huntr.dev/bounties/801efd0b-404b-4670-961a-12a986252fa4

CVSS3

5.4

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

REQUIRED

Scope

UNCHANGED

Confidentiality Impact

LOW

Integrity Impact

LOW

Availability Impact

NONE

CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:L/A:N

AI Score

4.4

Confidence

High

EPSS

0.001

Percentile

37.4%

JSON

Related for CVE-2023-0780