Cockpit Content Platform vulnerable to 2FA bypass

Mô tả

Tham khảo

• nvd.nist.gov/vuln/detail/CVE-2022-2818 · ADVISORY
• cockpit-hq/cockpit commit 4bee1b9 · WEB
• cockpit-hq/cockpit · PACKAGE
• huntr.dev/bounties/ee27e5df-516b-4cf4-9f28-346d907b5491 · WEB

Lỗ hổng khác của cockpit-hq/cockpit

• CVE-2026-23695TRUNG BÌNH 5.4Cockpit CMS through version 2.14.0, patched in commit 72a83fc, contains a stored cross-site scripting vulnerability in the Set field type's …
• CVE-2026-38993TRUNG BÌNH 6.5Cockpit 2.13.5 and earlier is vulnerable to directory traversal via the Buckets component. This vulnerability allows authenticated attackers…
• CVE-2026-38991CAO 8.8Cockpit 2.13.5 and earlier is affected by a misconfiguration within the Bucket component _isFileTypeAllowed function where a specially craft…
• CVE-2026-38992NGHIÊM TRỌNG 9.8Cockpit v2.13.5 and earlier is vulnerable to arbitrary code execution via the filter parameter within multiple endpoints. This vulnerability…
• CVE-2026-6626TRUNG BÌNH 6.3A vulnerability was detected in Cockpit-HQ Cockpit up to 2.13.5. Affected by this issue is some unknown functionality of the component Asset…