3 matches found
CVE-2023-4321 Cross-site Scripting (XSS) - Stored in cockpit-hq/cockpit
Cross-site Scripting XSS - Stored in GitHub repository cockpit-hq/cockpit prior to 2.4.3...
8.3CVSS7.8AI score0.00555EPSS
SaveExploits1References4
CVE-2023-4321
CVE-2023-4321 is a stored XSS in Cockpit (cockpit-hq/cockpit) prior to version 2.4.3. The vulnerability affects Cockpit’s web interface by storing and reflecting malicious input. CVSS v3.1 base score is 6.1 (MEDIUM) with Network access, no privileges required, UI interaction required, and confide...
8.3CVSS6.2AI score0.00555EPSS
SaveExploits1References2Affected Software1
20