Lucene search
Veracode Vulnerability DatabaseVERACODE:39808HistoryMar 17, 2023 - 3:38 a.m.
Remote Code Execution (RCE)
2023-03-1703:38:59
Veracode Vulnerability Database
sca.analysiscenter.veracode.com
31
remote code execution
cockpit-hq/cockpit
file extension validation
php code
software vulnerability
0.001 Low
EPSS
Percentile
36.6%
cockpit-hq/cockpit is vulnerable to Remote Code Execution (RCE). The vulnerability is due to a lack of file extension validation for user supplied files which allows an attacker to upload and execute malicious PHP code.
| CPE | Name | Operator | Version |
|---|---|---|---|
| cockpit-hq/cockpit | le | 2.4.0 | |
| cockpit-hq/cockpit | le | 2.4.0 |
Related
cve
cve
CVE-2023-1313
2023-03-10 12:15:21
osv
osv
CVE-2023-1313
2023-03-10 12:15:21
cockpit-hq/cockpit is vulnerable to unrestricted file uploads
2023-03-10 12:30:16
prion
prion
Unrestricted file upload
2023-03-10 12:15:00
nvd
nvd
CVE-2023-1313
2023-03-10 12:15:21
github
github
cockpit-hq/cockpit is vulnerable to unrestricted file uploads
2023-03-10 12:30:16
huntr
huntr
File Upload Bypass Leads to Remote Code Execution (RCE)
2023-03-09 08:52:18
cvelist
cvelist