Lucene search
+L

3 matches found

OSV
OSV
added 2026/03/17 5:07 p.m.3 views

GHSA-7X5C-VFHJ-9628 Cockpit CMS has SQL Injection in MongoLite Aggregation Optimizer via toJsonExtractRaw()

Impact This is a SQL Injection vulnerability in the MongoLite Aggregation Optimizer. Any Cockpit CMS instance running version 2.13.4 or earlier with API access enabled is potentially affected. Who is impacted: - Any deployment where the /api/content/aggregate/model endpoint is publicly accessible...

7.7CVSS6AI score0.00397EPSS
SaveExploits0References4
Rows per page
Query Builder