Vulnérabilités de cockpit-hq/cockpit · Page n° 2

CVE-2023-37649

Incorrect access control in the component /models/Content of Cockpit CMS v2.5.2 allows unauthorized attackers to access sensitive data.

• Mettez à jour vers 2.6.0

Unrestricted Upload of File with Dangerous Type in cockpit-hq/cockpit

Unrestricted Upload of File with Dangerous Type in GitHub repository cockpit-hq/cockpit prior to 2.4.1.

• Mettez à jour vers 2.4.1

Use of Platform-Dependent Third Party Components in cockpit-hq/cockpit

Use of Platform-Dependent Third Party Components in GitHub repository cockpit-hq/cockpit prior to 2.4.0.

Improper Restriction of Rendered UI Layers or Frames in cockpit-hq/cockpit

Improper Restriction of Rendered UI Layers or Frames in GitHub repository cockpit-hq/cockpit prior to 2.3.9-dev.

• Mettez à jour vers 2.3.9

Privilege Chaining in cockpit-hq/cockpit

Privilege Chaining in GitHub repository cockpit-hq/cockpit prior to 2.3.8.

• Mettez à jour vers 2.3.8

Improper Removal of Sensitive Information Before Storage or Transfer in cockpit-hq/cockpit

Improper Removal of Sensitive Information Before Storage or Transfer in GitHub repository cockpit-hq/cockpit prior to 2.2.2.

• Mettez à jour vers 2.2.2