medium6.1
CVE-2023-4451
Cockpit Cross-site Scripting vulnerability
Impact
Cross-site Scripting (XSS) - Reflected in GitHub repository cockpit-hq/cockpit version 2.6.3 and prior. A patch is available at commit 30609466c817e39f9de1871559603e93cd4d0d0c and anticipated to be part of version 2.6.4.
Affected packages
| Ecosystem | Package | Affected | Fixed in |
|---|---|---|---|
| composer | cockpit-hq/cockpit | <= 2.6.3 | none recorded |
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Agentejo | Cockpit | through 2.6.3 |
Weakness classification
References
- NVD record
- CVE.org record
- GitHub advisory
- https://github.com/cockpit-hq/cockpit/commit/30609466c817e39f9de1871559603e93cd4d0d0c
- https://huntr.dev/bounties/4e111c3e-6cf3-4b4c-b3c1-a540bf30f8fa
- https://github.com/MarkLee131/awesome-web-pocs/blob/main/CVE-2023-4451.md
- https://github.com/advisories/GHSA-g3mv-64h3-h482
- https://nvd.nist.gov/vuln/detail/CVE-2023-4451