GHSA-FF45-2JP9-69JC Cockpit Cross-site Scripting vulnerability

Cross-site Scripting XSS - Stored in GitHub repository cockpit-hq/cockpit version 2.6.3 and prior. A patch is available at commit 36d1d4d256cbbab028342ba10cc493e5c119172c and anticipated to be part of version 2.6.4...

CVE-2023-4432

Cross-site Scripting XSS - Reflected in GitHub repository cockpit-hq/cockpit prior to 2.6.4...

CVE-2023-4433

Cross-site Scripting XSS - Stored in GitHub repository cockpit-hq/cockpit prior to 2.6.4...

CVE-2023-4433 Cross-site Scripting (XSS) - Stored in cockpit-hq/cockpit

Cross-site Scripting XSS - Stored in GitHub repository cockpit-hq/cockpit prior to 2.6.4...

CVE-2023-4433 Cross-site Scripting (XSS) - Stored in cockpit-hq/cockpit

Cross-site Scripting XSS - Stored in GitHub repository cockpit-hq/cockpit prior to 2.6.4...

CVE-2023-4433

Cross-site Scripting XSS - Stored in GitHub repository cockpit-hq/cockpit prior to 2.6.4...

CVE-2023-4433 Cross-site Scripting (XSS) - Stored in cockpit-hq/cockpit

Cross-site Scripting XSS - Stored in GitHub repository cockpit-hq/cockpit prior to 2.6.4...

CVE-2023-4433

CVE-2023-4433 is a stored XSS vulnerability in cockpit-hq/cockpit, affecting versions prior to 2.6.4. The issue is in the upload path (bootstrap.php) where lack of MIME sanitization enables arbitrary JavaScript execution in the user’s browser. Public references indicate a patch is available and e...

CVE-2023-4432 Cross-site Scripting (XSS) - Reflected in cockpit-hq/cockpit

Cross-site Scripting XSS - Reflected in GitHub repository cockpit-hq/cockpit prior to 2.6.4...

CVE-2023-4432 Cross-site Scripting (XSS) - Reflected in cockpit-hq/cockpit

Cross-site Scripting XSS - Reflected in GitHub repository cockpit-hq/cockpit prior to 2.6.4...

CVE-2023-4432

Cross-site Scripting XSS - Reflected in GitHub repository cockpit-hq/cockpit prior to 2.6.4...

CVE-2023-4432

CVE-2023-4432: A reflected XSS in cockpit-hq/cockpit prior to 2.6.4. A patch is expected in 2.6.4 (commit 2a93d391fbd2dd9e730f65d43b29beb65903d195). Affected: Cockpit versions before 2.6.4. Remediation: upgrade to 2.6.4 or later (as per OSV/GHSA entries and PT-2023-29206). Notes: exploitation det...

CVE-2023-4432 Cross-site Scripting (XSS) - Reflected in cockpit-hq/cockpit

Cross-site Scripting XSS - Reflected in GitHub repository cockpit-hq/cockpit prior to 2.6.4...

Cockpit 跨站脚本漏洞

Cockpit is an interactive server management interface. A cross-site scripting vulnerability exists in cockpit versions prior to 2.6.4. An attacker could exploit this vulnerability to perform cross-site scripting attacks...

Cockpit 跨站脚本漏洞

Cockpit is an interactive server management interface. A cross-site scripting vulnerability exists in cockpit versions prior to 2.6.4. An attacker could exploit this vulnerability to perform cross-site scripting attacks...

CVE-2023-4433: Improper Neutralization of Input During Web Page Generation

Cross-site Scripting XSS - Stored in GitHub repository cockpit-hq/cockpit prior to 2.6.4...

CVE-2023-4432: Improper Neutralization of Input During Web Page Generation

Cross-site Scripting XSS - Reflected in GitHub repository cockpit-hq/cockpit prior to 2.6.4...

CVE-2023-4422

Cross-site Scripting XSS - Stored in GitHub repository cockpit-hq/cockpit prior to 2.6.3...

CVE-2023-4422 Cross-site Scripting (XSS) - Stored in cockpit-hq/cockpit

Cross-site Scripting XSS - Stored in GitHub repository cockpit-hq/cockpit prior to 2.6.3...

CVE-2023-4422

CVE-2023-4422 affects Cockpit: a stored Cross-site Scripting (XSS) vulnerability in cockpit-hq/cockpit prior to version 2.6.3. Public sources (NVD/NVDS, OSV, GHSA, CIRCL, PT-2023-29151) describe the issue as a stored XSS that can affect users viewing stored input, with each entry reaffirming that...