CVE-2023-4321 Cross-site Scripting (XSS) - Stored in cockpit-hq/cockpit

Cross-site Scripting XSS - Stored in GitHub repository cockpit-hq/cockpit prior to 2.4.3...

Cockpit Cross-Site Scripting Vulnerability

Cockpit is an interactive server management interface. A cross-site scripting vulnerability exists in Cockpit version 2.4.3, which stems from the presence of a cross-site scripting XSS vulnerability...

PT-2023-28732 · Cockpit · Cockpit

Name of the Vulnerable Software and Affected Versions: cockpit versions prior to 2.4.3 Description: The issue is related to Cross-site Scripting XSS - Stored in the GitHub repository cockpit-hq/cockpit. This type of attack occurs when an application stores user input and later displays it without...

The vulnerability of the Cockpit server management system arises from the lack of measures taken to protect the website structure. This allows attackers to carry out XSS attacks.

The vulnerability of the Cockpit server management system exists due to the lack of measures taken to protect the website structure. Exploiting this vulnerability allows a malicious actor to carry out XSS attacks remotely...

Cross-site Scripting (XSS)

cockpit-hq/cockpit is vulnerable to Cross-site Scripting XSS. The vulnerability exists due to bootstrap.php accepting html files as an upload, which allows an attacker to inject and execute malicious Javascript into the browser...

Remote Code Execution

cockpit-hq/cockpit is vulnerable to Remote Code Execution RCE. The vulnerability exists due to a lack of file upload sanitization in bootstrap.php which allows an attacker to inject and execute malicious PHP code by uploading a php file with an extension such as phps...

GHSA-W3QM-93VF-5HRW Cockpit Cross-site Scripting vulnerability

Cross-site Scripting XSS - Stored in GitHub repository cockpit-hq/cockpit prior to 2.6.3. For any role that has permission to execute function assets, an attacker can upload a html file and that leads to XSS...

CVE-2023-4196

Cross-site Scripting XSS - Stored in GitHub repository cockpit-hq/cockpit prior to 2.6.3...

Cross site scripting

Cross-site Scripting XSS - Stored in GitHub repository cockpit-hq/cockpit prior to 2.6.3...

CVE-2023-4196

CVE-2023-4196 affects Cockpit (cockpit-hq/cockpit) versions prior to 2.6.3. It is a stored XSS vulnerability where an attacker with permission to execute function assets can cause an XSS by uploading an HTML file, leading to code execution in the victim’s browser. The issue’s root cause is insuff...

CVE-2023-4195 PHP Remote File Inclusion in cockpit-hq/cockpit

PHP Remote File Inclusion in GitHub repository cockpit-hq/cockpit prior to 2.6.3...

CVE-2023-4195 PHP Remote File Inclusion in cockpit-hq/cockpit

PHP Remote File Inclusion in GitHub repository cockpit-hq/cockpit prior to 2.6.3...

CVE-2023-4195 PHP Remote File Inclusion in cockpit-hq/cockpit

PHP Remote File Inclusion in GitHub repository cockpit-hq/cockpit prior to 2.6.3...

Cockpit Security Vulnerabilities

Cockpit is an interactive server management interface. A security vulnerability exists in cockpit version 2.6.3, which stems from the presence of a PHP remote file inclusion vulnerability...

Cockpit Cross-Site Scripting Vulnerability

Cockpit is an interactive server management interface. A cross-site scripting vulnerability exists in cockpit versions prior to 2.6.3. An attacker could exploit this vulnerability to perform cross-site scripting attacks...

PT-2023-4278 · Cockpit · Cockpit

Name of the Vulnerable Software and Affected Versions: Cockpit versions prior to 2.6.3 Description: The issue is related to incorrect management of file names for PHP include or require functions in the Cockpit server management system. This can allow a remote attacker to execute arbitrary code...

Important: Red Hat Security Advisory: Red Hat Virtualization Host 4.4.z SP 1 security update

An update for redhat-release-virtualization-host and redhat-virtualization-host is now available for Red Hat Virtualization 4 for Red Hat Enterprise Linux 8. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System CVSS base...

Cross-Site Request Forgery (CSRF)

cockpit-hq/cockpit is vulnerable to Cross-Site Request Forgery CSRF. The vulnerability exists in multiple functions of the Admin portal, which allows an attacker to execute arbitrary administrator commands...

Cross-Site Request Forgery (CSRF)

cockpit-hq/cockpit is vulnerable to Cross-Site Request Forgery CSRF. The vulnerability exists because it does not use a csrf token, which allows an attacker to execute arbitrary commands on the system as an administrator...

Information Exposure

cockpit-hq/cockpit is vulnerable to Information Exposure. The vulnerability exists because the system does not properly validate /models/Content, which allows an attacker to read sensitive information in the system...