Cockpit Security Vulnerabilities and Issues — Cockpit CVE List

Lucene search

AgentejoCockpit

3 matches found

CVE•added 2024/02/29 2:15 p.m.•82 views

CVE-2024-2001

A Cross-Site Scripting vulnerability in Cockpit CMS affecting version 2.7.0. This vulnerability could allow an authenticated user to upload an infected PDF file and store a malicious JavaScript payload to be executed when the file is uploaded.

5.5CVSS5.2AI score0.00088EPSS

CVE•added 2023/03/03 2:15 a.m.•59 views

CVE-2023-1160

Use of Platform-Dependent Third Party Components in GitHub repository cockpit-hq/cockpit prior to 2.4.0.

5.5CVSS4.9AI score0.00114EPSS

CVE•added 2023/02/11 2:20 a.m.•55 views

CVE-2023-0780

Improper Restriction of Rendered UI Layers or Frames in GitHub repository cockpit-hq/cockpit prior to 2.3.9-dev.

5.4CVSS4.8AI score0.00173EPSS