Agentejo: >> Cockpit >> 2.1.0 Security Vulnerabilities
A Cross-Site Request Forgery (CSRF) in the Admin portal of Cockpit CMS v2.5.2 allows attackers to execute arbitrary Administrator commands.
CVSS Score
8.8
EPSS Score
0.011
Published
2023-07-20
Unrestricted Upload of File with Dangerous Type in GitHub repository cockpit-hq/cockpit prior to 2.4.1.
CVSS Score
7.2
EPSS Score
0.001
Published
2023-03-10
Use of Platform-Dependent Third Party Components in GitHub repository cockpit-hq/cockpit prior to 2.4.0.
CVSS Score
4.0
EPSS Score
0.001
Published
2023-03-03
Improper Restriction of Rendered UI Layers or Frames in GitHub repository cockpit-hq/cockpit prior to 2.3.9-dev.
CVSS Score
4.0
EPSS Score
0.002
Published
2023-02-11
Privilege Chaining in GitHub repository cockpit-hq/cockpit prior to 2.3.8.
CVSS Score
5.3
EPSS Score
0.001
Published
2023-02-09
Improper Removal of Sensitive Information Before Storage or Transfer in GitHub repository cockpit-hq/cockpit prior to 2.2.2.
CVSS Score
9.8
EPSS Score
0.014
Published
2022-08-15
Insufficient Session Expiration in GitHub repository cockpit-hq/cockpit prior to 2.2.0.
CVSS Score
8.6
EPSS Score
0.01
Published
2022-08-08
Page 2