CVE-2023-37649
Incorrect access control in the component /models/Content of Cockpit CMS v2.5.2 allows unauthorized attackers to access sensitive data.
- Actualiza a 2.6.0
PatchFirst · Vulnerabilidades recientes
Vulnerabilidades publicadas para cockpit-hq/cockpit en los últimos 30 días: 0. Incluidas en el catálogo KEV: 0.
Vulnerabilidades: 26
Incorrect access control in the component /models/Content of Cockpit CMS v2.5.2 allows unauthorized attackers to access sensitive data.
Unrestricted Upload of File with Dangerous Type in GitHub repository cockpit-hq/cockpit prior to 2.4.1.
Use of Platform-Dependent Third Party Components in GitHub repository cockpit-hq/cockpit prior to 2.4.0.
Improper Restriction of Rendered UI Layers or Frames in GitHub repository cockpit-hq/cockpit prior to 2.3.9-dev.
Privilege Chaining in GitHub repository cockpit-hq/cockpit prior to 2.3.8.
Improper Removal of Sensitive Information Before Storage or Transfer in GitHub repository cockpit-hq/cockpit prior to 2.2.2.
Compara tu pila y las versiones instaladas con las bases actuales de vulnerabilidades.