Cross site scripting

Cross-site Scripting XSS - Stored in GitHub repository cockpit-hq/cockpit prior to 2.4.3...

CVE-2023-4321 Cross-site Scripting (XSS) - Stored in cockpit-hq/cockpit

Cross-site Scripting XSS - Stored in GitHub repository cockpit-hq/cockpit prior to 2.4.3...

CVE-2023-4321 Cross-site Scripting (XSS) - Stored in cockpit-hq/cockpit

Cross-site Scripting XSS - Stored in GitHub repository cockpit-hq/cockpit prior to 2.4.3...

CVE-2023-4321

CVE-2023-4321 is a stored XSS in Cockpit (cockpit-hq/cockpit) prior to version 2.4.3. The vulnerability affects Cockpit’s web interface by storing and reflecting malicious input. CVSS v3.1 base score is 6.1 (MEDIUM) with Network access, no privileges required, UI interaction required, and confide...

CVE-2023-4321

Cross-site Scripting XSS - Stored in GitHub repository cockpit-hq/cockpit prior to 2.4.3...

Cockpit Cross-Site Scripting Vulnerability

Cockpit is an interactive server management interface. A cross-site scripting vulnerability exists in Cockpit version 2.4.3, which stems from the presence of a cross-site scripting XSS vulnerability...

PT-2023-28732 · Cockpit · Cockpit

Name of the Vulnerable Software and Affected Versions: cockpit versions prior to 2.4.3 Description: The issue is related to Cross-site Scripting XSS - Stored in the GitHub repository cockpit-hq/cockpit. This type of attack occurs when an application stores user input and later displays it without...

CVE-2023-4321: Improper Neutralization of Input During Web Page Generation

Cross-site Scripting XSS - Stored in GitHub repository cockpit-hq/cockpit prior to 2.4.3...

The vulnerability of the Cockpit server management system arises from the lack of measures taken to protect the website structure. This allows attackers to carry out XSS attacks.

The vulnerability of the Cockpit server management system exists due to the lack of measures taken to protect the website structure. Exploiting this vulnerability allows a malicious actor to carry out XSS attacks remotely...

Cross-site Scripting (XSS)

cockpit-hq/cockpit is vulnerable to Cross-site Scripting XSS. The vulnerability exists due to bootstrap.php accepting html files as an upload, which allows an attacker to inject and execute malicious Javascript into the browser...

Remote Code Execution

cockpit-hq/cockpit is vulnerable to Remote Code Execution RCE. The vulnerability exists due to a lack of file upload sanitization in bootstrap.php which allows an attacker to inject and execute malicious PHP code by uploading a php file with an extension such as phps...

GHSA-W3QM-93VF-5HRW Cockpit Cross-site Scripting vulnerability

Cross-site Scripting XSS - Stored in GitHub repository cockpit-hq/cockpit prior to 2.6.3. For any role that has permission to execute function assets, an attacker can upload a html file and that leads to XSS...

CVE-2023-4196

Cross-site Scripting XSS - Stored in GitHub repository cockpit-hq/cockpit prior to 2.6.3...

Cross site scripting

Cross-site Scripting XSS - Stored in GitHub repository cockpit-hq/cockpit prior to 2.6.3...

CVE-2023-4196

CVE-2023-4196 affects Cockpit (cockpit-hq/cockpit) versions prior to 2.6.3. It is a stored XSS vulnerability where an attacker with permission to execute function assets can cause an XSS by uploading an HTML file, leading to code execution in the victim’s browser. The issue’s root cause is insuff...

CVE-2023-4196

Cross-site Scripting XSS - Stored in GitHub repository cockpit-hq/cockpit prior to 2.6.3...

CVE-2023-4195 PHP Remote File Inclusion in cockpit-hq/cockpit

PHP Remote File Inclusion in GitHub repository cockpit-hq/cockpit prior to 2.6.3...

CVE-2023-4195 PHP Remote File Inclusion in cockpit-hq/cockpit

PHP Remote File Inclusion in GitHub repository cockpit-hq/cockpit prior to 2.6.3...

CVE-2023-4195

PHP Remote File Inclusion in GitHub repository cockpit-hq/cockpit prior to 2.6.3...

CVE-2023-4195 PHP Remote File Inclusion in cockpit-hq/cockpit

PHP Remote File Inclusion in GitHub repository cockpit-hq/cockpit prior to 2.6.3...