GHSA-G3MV-64H3-H482 Cockpit Cross-site Scripting vulnerability

Cross-site Scripting XSS - Reflected in GitHub repository cockpit-hq/cockpit version 2.6.3 and prior. A patch is available at commit 30609466c817e39f9de1871559603e93cd4d0d0c and anticipated to be part of version 2.6.4...

CVE-2023-4451

Cross-site Scripting XSS - Reflected in GitHub repository cockpit-hq/cockpit prior to 2.6.4...

Cross site scripting

Cross-site Scripting XSS - Reflected in GitHub repository cockpit-hq/cockpit prior to 2.6.4...

CVE-2023-4451 Cross-site Scripting (XSS) - Reflected in cockpit-hq/cockpit

Cross-site Scripting XSS - Reflected in GitHub repository cockpit-hq/cockpit prior to 2.6.4...

CVE-2023-4451

Cockpit (cockpit-hq/cockpit) before version 2.6.4 is vulnerable to Reflected Cross-site Scripting (XSS) via the install/index.php interaction, due to insufficient sanitization/encoding of the space parameter in the installation interface. Exploitation could allow an unauthenticated attacker to in...

Cockpit 跨站脚本漏洞

Cockpit is an interactive server management interface. A cross-site scripting vulnerability exists in cockpit versions prior to 2.6.4. An attacker could exploit this vulnerability to perform cross-site scripting attacks...

GHSA-FF45-2JP9-69JC Cockpit Cross-site Scripting vulnerability

Cross-site Scripting XSS - Stored in GitHub repository cockpit-hq/cockpit version 2.6.3 and prior. A patch is available at commit 36d1d4d256cbbab028342ba10cc493e5c119172c and anticipated to be part of version 2.6.4...

GHSA-RMGX-3W4R-XCFP Cockpit Cross-site Scripting vulnerability

Cross-site Scripting XSS - Reflected in GitHub repository cockpit-hq/cockpit version 2.6.3 and prior. A patch is available at commit 2a93d391fbd2dd9e730f65d43b29beb65903d195 and anticipated to be part of version 2.6.4...

CVE-2023-4432

Cross-site Scripting XSS - Reflected in GitHub repository cockpit-hq/cockpit prior to 2.6.4...

CVE-2023-4433

Cross-site Scripting XSS - Stored in GitHub repository cockpit-hq/cockpit prior to 2.6.4...

CVE-2023-4433

CVE-2023-4433 is a stored XSS vulnerability in cockpit-hq/cockpit, affecting versions prior to 2.6.4. The issue is in the upload path (bootstrap.php) where lack of MIME sanitization enables arbitrary JavaScript execution in the user’s browser. Public references indicate a patch is available and e...

CVE-2023-4433 Cross-site Scripting (XSS) - Stored in cockpit-hq/cockpit

Cross-site Scripting XSS - Stored in GitHub repository cockpit-hq/cockpit prior to 2.6.4...

CVE-2023-4433 Cross-site Scripting (XSS) - Stored in cockpit-hq/cockpit

Cross-site Scripting XSS - Stored in GitHub repository cockpit-hq/cockpit prior to 2.6.4...

CVE-2023-4433 Cross-site Scripting (XSS) - Stored in cockpit-hq/cockpit

Cross-site Scripting XSS - Stored in GitHub repository cockpit-hq/cockpit prior to 2.6.4...

CVE-2023-4432 Cross-site Scripting (XSS) - Reflected in cockpit-hq/cockpit

Cross-site Scripting XSS - Reflected in GitHub repository cockpit-hq/cockpit prior to 2.6.4...

CVE-2023-4432

CVE-2023-4432: A reflected XSS in cockpit-hq/cockpit prior to 2.6.4. A patch is expected in 2.6.4 (commit 2a93d391fbd2dd9e730f65d43b29beb65903d195). Affected: Cockpit versions before 2.6.4. Remediation: upgrade to 2.6.4 or later (as per OSV/GHSA entries and PT-2023-29206). Notes: exploitation det...

CVE-2023-4432 Cross-site Scripting (XSS) - Reflected in cockpit-hq/cockpit

Cross-site Scripting XSS - Reflected in GitHub repository cockpit-hq/cockpit prior to 2.6.4...

CVE-2023-4432 Cross-site Scripting (XSS) - Reflected in cockpit-hq/cockpit

Cross-site Scripting XSS - Reflected in GitHub repository cockpit-hq/cockpit prior to 2.6.4...

Cockpit 跨站脚本漏洞

Cockpit is an interactive server management interface. A cross-site scripting vulnerability exists in cockpit versions prior to 2.6.4. An attacker could exploit this vulnerability to perform cross-site scripting attacks...

Cockpit 跨站脚本漏洞

Cockpit is an interactive server management interface. A cross-site scripting vulnerability exists in cockpit versions prior to 2.6.4. An attacker could exploit this vulnerability to perform cross-site scripting attacks...