cockpit-hq/cockpit is vulnerable to unrestricted file uploads

ALTO 8.8CVE-2023-1313 · GHSA-6x8f-x6qw-qwx3 · Published 10/03/2023 · updated 17/06/2026

In breve

CVE-2023-1313 è una vulnerabilità ALTO (CVSS 8.8) che riguarda cockpit-hq/cockpit, cockpit (agentejo).
Probabilità di sfruttamento nei prossimi 30 giorni (EPSS): 0.99%, superiore al 62.4% delle vulnerabilità.
Correzione: aggiornare a 2.4.1 o successiva.

Package	Affected versions	Patched versions
cockpit-hq/cockpit Packagist	`< 2.4.1`	`2.4.1`
cockpit agentejo	`≤ 2.4.0`	No fix yet

Unrestricted Upload of File with Dangerous Type in GitHub repository cockpit-hq/cockpit prior to 2.4.1.

NVD description

Unrestricted Upload of File with Dangerous Type in GitHub repository cockpit-hq/cockpit prior to 2.4.1.

Running one of these products? Scan your site to see whether it exposes a vulnerable version.

Package

Affected versions

Patched versions

Packagist

< 2.4.1

2.4.1

≤ 2.4.0

No fix yet

Altre vulnerabilità di cockpit-hq/cockpit

Vedi tutto →