Lucene search

Remote Code Execution

🗓️ 08 Aug 2023 06:57:59Reported by Veracode Vulnerability DatabaseType

veracode🔗 sca.analysiscenter.veracode.com👁 12 Views

Vulnerability in cockpit-hq/cockpit for Remote Code Execution due to lack of file upload sanitization

Reporter	Title	Published	Views	Family All 9
Vulnrichment	CVE-2023-4195 PHP Remote File Inclusion in cockpit-hq/cockpit	6 Aug 202317:02	–	vulnrichment
Cvelist	CVE-2023-4195 PHP Remote File Inclusion in cockpit-hq/cockpit	6 Aug 202317:02	–	cvelist
OSV	Cockpit PHP Remote File Inclusion vulnerability	6 Aug 202318:30	–	osv
OSV	CVE-2023-4195	6 Aug 202318:15	–	osv
Github Security Blog	Cockpit PHP Remote File Inclusion vulnerability	6 Aug 202318:30	–	github
CVE	CVE-2023-4195	6 Aug 202318:15	–	cve
Huntr	File Upload Bypass Leads to Remote Code Execution (RCE)	5 Aug 202316:46	–	huntr
NVD	CVE-2023-4195	6 Aug 202318:15	–	nvd
Prion	Remote file inclusion	6 Aug 202318:15	–	prion

Vulners

Node

cockpit-project cockpitRange≤2.6.2

Source	Link
huntr	www.huntr.dev/bounties/0bd5da2f-0e29-47ce-90f3-06518656bfd6
github	www.github.com/cockpit-hq/cockpit/commit/800c05f1984db291769ffa5fdfb1d3e50968e95b
github	www.github.com/advisories/GHSA-xcq3-7pf3-5jvc

Transform Your Security Services

Elevate your offerings with Vulners' advanced Vulnerability Intelligence. Contact us for a demo and discover the difference comprehensive, actionable intelligence can make in your security strategy.

Book a live demo

08 Aug 2023 06:59Current

7.8High risk

Vulners AI Score7.8

CVSS38.8

EPSS0.002