CVE-2023-37649
Incorrect access control in the component /models/Content of Cockpit CMS v2.5.2 allows unauthorized attackers to access sensitive data.
- Update to 2.6.0
Published Updated
PatchFirst · Latest vulnerabilities
cockpit-hq/cockpit vulnerabilities · Page 2
Vulnerabilities published for cockpit-hq/cockpit in the last 30 days: 0. Listed in the KEV catalogue: 0.
Vulnerabilities: 26
Unrestricted Upload of File with Dangerous Type in cockpit-hq/cockpit
Unrestricted Upload of File with Dangerous Type in GitHub repository cockpit-hq/cockpit prior to 2.4.1.
- Update to 2.4.1
Published UpdatedUse of Platform-Dependent Third Party Components in cockpit-hq/cockpit
Use of Platform-Dependent Third Party Components in GitHub repository cockpit-hq/cockpit prior to 2.4.0.
Published UpdatedImproper Restriction of Rendered UI Layers or Frames in cockpit-hq/cockpit
Improper Restriction of Rendered UI Layers or Frames in GitHub repository cockpit-hq/cockpit prior to 2.3.9-dev.
- Update to 2.3.9
Published UpdatedPrivilege Chaining in cockpit-hq/cockpit
Privilege Chaining in GitHub repository cockpit-hq/cockpit prior to 2.3.8.
- Update to 2.3.8
Published UpdatedImproper Removal of Sensitive Information Before Storage or Transfer in cockpit-hq/cockpit
Improper Removal of Sensitive Information Before Storage or Transfer in GitHub repository cockpit-hq/cockpit prior to 2.2.2.
- Update to 2.2.2
Published Updated
Check your server
Check your installed stack and versions against the current vulnerability feeds.