Cross-site Scripting (XSS)

cockpit-hq/cockpit is vulnerable to Cross-site Scripting XSS. The vulnerability exists in Rest/GraphQL viewer due to lack of escaping script tags which allows an attacker to inject and execute arbitrary javascript...

Cross-site Scripting (XSS)

cockpit-hq/cockpit is vulnerable to Cross-site Scripting XSS. The vulnerability exists in upload function at bootstrap.php because due to improper sanitization of inputs which allows an attacker to inject and execute arbitrary javascript...

GHSA-G3MV-64H3-H482 Cockpit Cross-site Scripting vulnerability

Cross-site Scripting XSS - Reflected in GitHub repository cockpit-hq/cockpit version 2.6.3 and prior. A patch is available at commit 30609466c817e39f9de1871559603e93cd4d0d0c and anticipated to be part of version 2.6.4...

CVE-2023-4451

Cross-site Scripting XSS - Reflected in GitHub repository cockpit-hq/cockpit prior to 2.6.4...

Cross site scripting

Cross-site Scripting XSS - Reflected in GitHub repository cockpit-hq/cockpit prior to 2.6.4...

CVE-2023-4451 Cross-site Scripting (XSS) - Reflected in cockpit-hq/cockpit

Cross-site Scripting XSS - Reflected in GitHub repository cockpit-hq/cockpit prior to 2.6.4...

CVE-2023-4451

Cockpit (cockpit-hq/cockpit) before version 2.6.4 is vulnerable to Reflected Cross-site Scripting (XSS) via the install/index.php interaction, due to insufficient sanitization/encoding of the space parameter in the installation interface. Exploitation could allow an unauthenticated attacker to in...

CVE-2023-4432

Cross-site Scripting XSS - Reflected in GitHub repository cockpit-hq/cockpit prior to 2.6.4...

CVE-2023-4433

Cross-site Scripting XSS - Stored in GitHub repository cockpit-hq/cockpit prior to 2.6.4...

CVE-2023-4433 Cross-site Scripting (XSS) - Stored in cockpit-hq/cockpit

Cross-site Scripting XSS - Stored in GitHub repository cockpit-hq/cockpit prior to 2.6.4...

CVE-2023-4433

CVE-2023-4433 is a stored XSS vulnerability in cockpit-hq/cockpit, affecting versions prior to 2.6.4. The issue is in the upload path (bootstrap.php) where lack of MIME sanitization enables arbitrary JavaScript execution in the user’s browser. Public references indicate a patch is available and e...

CVE-2023-4433 Cross-site Scripting (XSS) - Stored in cockpit-hq/cockpit

Cross-site Scripting XSS - Stored in GitHub repository cockpit-hq/cockpit prior to 2.6.4...

CVE-2023-4433 Cross-site Scripting (XSS) - Stored in cockpit-hq/cockpit

Cross-site Scripting XSS - Stored in GitHub repository cockpit-hq/cockpit prior to 2.6.4...

CVE-2023-4432

CVE-2023-4432: A reflected XSS in cockpit-hq/cockpit prior to 2.6.4. A patch is expected in 2.6.4 (commit 2a93d391fbd2dd9e730f65d43b29beb65903d195). Affected: Cockpit versions before 2.6.4. Remediation: upgrade to 2.6.4 or later (as per OSV/GHSA entries and PT-2023-29206). Notes: exploitation det...

CVE-2023-4432 Cross-site Scripting (XSS) - Reflected in cockpit-hq/cockpit

Cross-site Scripting XSS - Reflected in GitHub repository cockpit-hq/cockpit prior to 2.6.4...

CVE-2023-4432 Cross-site Scripting (XSS) - Reflected in cockpit-hq/cockpit

Cross-site Scripting XSS - Reflected in GitHub repository cockpit-hq/cockpit prior to 2.6.4...

CVE-2023-4432 Cross-site Scripting (XSS) - Reflected in cockpit-hq/cockpit

Cross-site Scripting XSS - Reflected in GitHub repository cockpit-hq/cockpit prior to 2.6.4...

CVE-2023-4422

Cross-site Scripting XSS - Stored in GitHub repository cockpit-hq/cockpit prior to 2.6.3...

CVE-2023-4422 Cross-site Scripting (XSS) - Stored in cockpit-hq/cockpit

Cross-site Scripting XSS - Stored in GitHub repository cockpit-hq/cockpit prior to 2.6.3...

CVE-2023-4422

CVE-2023-4422 affects Cockpit: a stored Cross-site Scripting (XSS) vulnerability in cockpit-hq/cockpit prior to version 2.6.3. Public sources (NVD/NVDS, OSV, GHSA, CIRCL, PT-2023-29151) describe the issue as a stored XSS that can affect users viewing stored input, with each entry reaffirming that...