Cockpit Cross-Site Request Forgery Vulnerability

Cockpit is an open source CMS Content Management System for managing structured content. A server-side request forgery vulnerability exists in the /assets/lib/fuc.js.php file in Cockpit versions 0.4.4 through 0.5.5. A remote attacker can exploit this vulnerability to read arbitrary files or send...

PT-2018-18961

Name of the Vulnerable Software and Affected Versions Cockpit versions 0.4.4 through 0.5.5 Description The issue allows remote attackers to read arbitrary files or send TCP traffic to intranet hosts. This is due to an incomplete fix for a previous issue, which was related to version 0.13.0, an...