1905 matches found
CVE-2023-4422 Cross-site Scripting (XSS) - Stored in cockpit-hq/cockpit
Cross-site Scripting XSS - Stored in GitHub repository cockpit-hq/cockpit prior to 2.6.3...
CVE-2023-4422
Cross-site Scripting XSS - Stored in GitHub repository cockpit-hq/cockpit prior to 2.6.3...
Cross-Site Scripting (XSS)
cockpit-hq/cockpit is vulnerable to Cross-Site Scripting XSS attacks. The vulnerability occurs because the library does not properly escape user input when rendering templates, allowing an authenticated attacker to inject malicious JavaScript code into a Cockpit page, which would then be executed...
Cockpit 跨站脚本漏洞
Cockpit is an interactive server management interface. A cross-site scripting vulnerability exists in cockpit versions prior to 2.6.3. An attacker could exploit this vulnerability to perform cross-site scripting attacks...
PT-2023-29206 · Cockpit · Cockpit
Name of the Vulnerable Software and Affected Versions: cockpit versions prior to 2.6.4 Description: The issue is related to Cross-site Scripting XSS - Reflected in the GitHub repository cockpit-hq/cockpit. This type of attack occurs when an application includes user input in its response without...
PT-2023-29151 · Cockpit · Cockpit
Name of the Vulnerable Software and Affected Versions: cockpit versions prior to 2.6.3 Description: The issue is related to Cross-site Scripting XSS - Stored in the GitHub repository cockpit-hq/cockpit. This type of attack occurs when an application stores user input data without proper validatio...
CVE-2023-4422: Improper Neutralization of Input During Web Page Generation
Cross-site Scripting XSS - Stored in GitHub repository cockpit-hq/cockpit prior to 2.6.3...
PT-2023-29207
Name of the Vulnerable Software and Affected Versions cockpit-hq/cockpit versions prior to 2.6.4 Description The issue is related to Cross-site Scripting XSS - Stored. A patch is available and is anticipated to be part of version 2.6.4. Recommendations For versions prior to 2.6.4, update to versi...
Cockpit Cross-site Scripting vulnerability
Cross-site Scripting XSS - Stored in GitHub repository cockpit-hq/cockpit 2.6.3 and prior. A patch is available at commit 36d1d4d256cbbab028342ba10cc493e5c119172c and anticipated to be part of version 2.6.4...
GHSA-5CV4-48H7-7782 Cockpit Cross-site Scripting vulnerability
Cross-site Scripting XSS - Stored in GitHub repository cockpit-hq/cockpit 2.6.3 and prior. A patch is available at commit 36d1d4d256cbbab028342ba10cc493e5c119172c and anticipated to be part of version 2.6.4...
CVE-2023-4395 Cross-site Scripting (XSS) - Stored in cockpit-hq/cockpit
Cross-site Scripting XSS - Stored in GitHub repository cockpit-hq/cockpit prior to 2.6.4...
CVE-2023-4395 Cross-site Scripting (XSS) - Stored in cockpit-hq/cockpit
Cross-site Scripting XSS - Stored in GitHub repository cockpit-hq/cockpit prior to 2.6.4...
CVE-2023-4395
Cockpit XSS vulnerability (CVE-2023-4395) affects cockpit-hq/cockpit prior to version 2.6.4. The issue is a Stored XSS in the web UI, caused by input not being properly escaped in templates, allowing an authenticated attacker to inject JavaScript into Cockpit pages (Veracode description). Public ...
CVE-2023-4395 Cross-site Scripting (XSS) - Stored in cockpit-hq/cockpit
Cross-site Scripting XSS - Stored in GitHub repository cockpit-hq/cockpit prior to 2.6.4...
CVE-2023-4395
Cross-site Scripting XSS - Stored in GitHub repository cockpit-hq/cockpit prior to 2.6.4...
Cockpit 跨站脚本漏洞
Cockpit is an interactive server management interface. A cross-site scripting vulnerability exists in cockpit versions prior to 2.6.4. An attacker could exploit this vulnerability to perform cross-site scripting attacks...
CVE-2023-4395: Improper Neutralization of Input During Web Page Generation
Cross-site Scripting XSS - Stored in GitHub repository cockpit-hq/cockpit prior to 2.6.4...
Cross-site Scripting (XSS)
cockpit-hq/cockpit is vulnerable to Stored Cross-site Scripting XSS. The vulnerability exists because xhtml files are not restricted which allows an attacker to upload a xhtml files in the assets manager, resulting in XSS when viewed...
PT-2023-29045
Name of the Vulnerable Software and Affected Versions cockpit versions prior to 2.6.4 Description The issue is related to Cross-site Scripting XSS - Stored in the GitHub repository cockpit-hq/cockpit. This type of attack occurs when an application stores user input and later displays it to other...
