high7.5
CVE-2023-37649
Cockpit CMS vulnerable to incorrect access control
Impact
Incorrect access control in the component `/models/Content` of Cockpit CMS v2.5.2 allows unauthorized attackers to access sensitive data.
Affected packages
| Ecosystem | Package | Affected | Fixed in |
|---|---|---|---|
| composer | cockpit-hq/cockpit | < 2.6.0 | 2.6.0 |
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Agentejo | Cockpit | through 2.5.2 |