medium6.1
CVE-2023-41564
Cockpit CMS arbitrary file upload vulnerability
Impact
An arbitrary file upload vulnerability in the Upload Asset function of Cockpit CMS v2.6.3 allows attackers to execute arbitrary code via uploading a crafted `.shtml` file.
Affected packages
| Ecosystem | Package | Affected | Fixed in |
|---|---|---|---|
| composer | cockpit-hq/cockpit | <= 2.6.3 | none recorded |
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Agentejo | Cockpit | Version 2.6.3 |