Cockpit@* Security Vulnerabilities and Issues — Cockpit@* CVE List

Lucene search

AgentejoCockpit*

15 matches found

CVE•added 2023/07/20 8:15 p.m.•152 views

CVE-2023-37649

Incorrect access control in the component /models/Content of Cockpit CMS v2.5.2 allows unauthorized attackers to access sensitive data.

7.5CVSS7.4AI score0.0053EPSS

CVE•added 2023/08/18 7:15 p.m.•126 views

CVE-2023-4422

Cross-site Scripting (XSS) - Stored in GitHub repository cockpit-hq/cockpit prior to 2.6.3.

6.8CVSS5AI score0.00098EPSS

CVE•added 2023/08/19 1:15 a.m.•126 views

CVE-2023-4433

Cross-site Scripting (XSS) - Stored in GitHub repository cockpit-hq/cockpit prior to 2.6.4.

8.3CVSS5.5AI score0.00151EPSS

CVE•added 2023/08/19 1:15 a.m.•118 views

CVE-2023-4432

Cross-site Scripting (XSS) - Reflected in GitHub repository cockpit-hq/cockpit prior to 2.6.4.

8.3CVSS6.2AI score0.00287EPSS

CVE•added 2023/03/10 12:15 p.m.•79 views

CVE-2023-1313

Unrestricted Upload of File with Dangerous Type in GitHub repository cockpit-hq/cockpit prior to 2.4.1.

8.8CVSS7.8AI score0.00083EPSS

CVE•added 2023/08/20 3:15 p.m.•66 views

CVE-2023-4451

Cross-site Scripting (XSS) - Reflected in GitHub repository cockpit-hq/cockpit prior to 2.6.4.

6.1CVSS6AI score0.41626EPSS

CVE•added 2023/08/17 4:15 a.m.•61 views

CVE-2023-4395

Cross-site Scripting (XSS) - Stored in GitHub repository cockpit-hq/cockpit prior to 2.6.4.

8.1CVSS5.5AI score0.00084EPSS

CVE•added 2023/03/03 2:15 a.m.•58 views

CVE-2023-1160

Use of Platform-Dependent Third Party Components in GitHub repository cockpit-hq/cockpit prior to 2.4.0.

5.5CVSS4.9AI score0.00098EPSS

CVE•added 2023/02/11 2:20 a.m.•54 views

CVE-2023-0780

Improper Restriction of Rendered UI Layers or Frames in GitHub repository cockpit-hq/cockpit prior to 2.3.9-dev.

5.4CVSS4.8AI score0.00173EPSS

CVE•added 2023/08/06 6:15 p.m.•47 views

CVE-2023-4195

PHP Remote File Inclusion in GitHub repository cockpit-hq/cockpit prior to 2.6.3.

9.9CVSS8.8AI score0.00624EPSS

CVE•added 2023/08/06 6:15 p.m.•42 views

CVE-2023-4196

Cross-site Scripting (XSS) - Stored in GitHub repository cockpit-hq/cockpit prior to 2.6.3.

8.3CVSS5.5AI score0.00064EPSS

CVE•added 2023/02/09 2:15 p.m.•41 views

CVE-2023-0759

Privilege Chaining in GitHub repository cockpit-hq/cockpit prior to 2.3.8.

8.8CVSS6.8AI score0.0004EPSS

CVE•added 2023/02/21 3:15 p.m.•40 views

CVE-2021-32857

Cockpit is a content management system that allows addition of content management functionality to any site. In versions 0.12.2 and prior, bad HTML sanitization in htmleditor.js may lead to cross-site scripting (XSS) issues. There are no known patches for this issue.

6.1CVSS6AI score0.00477EPSS

CVE•added 2023/08/14 11:15 a.m.•40 views

CVE-2023-4321

Cross-site Scripting (XSS) - Stored in GitHub repository cockpit-hq/cockpit prior to 2.4.3.

8.3CVSS6.2AI score0.00292EPSS

CVE•added 2023/07/20 8:15 p.m.•39 views

CVE-2023-37650

A Cross-Site Request Forgery (CSRF) in the Admin portal of Cockpit CMS v2.5.2 allows attackers to execute arbitrary Administrator commands.

8.8CVSS8.9AI score0.00651EPSS