| Package | Affected versions | Patched versions |
|---|---|---|
| cockpit | < 0.11.2 | 0.11.2 |
Agentejo Cockpit before 0.11.2 allows NoSQL injection via the Controller/Auth.php newpassword function.
Running one of these products? Scan your site to see whether it exposes a vulnerable version.
Scan my site free