CVE-2023-0780: falha de média gravidade em cockpit-hq/cockpit
Improper Restriction of Rendered UI Layers or Frames in cockpit-hq/cockpit
Publicada em · Atualizada em
Aviso por e-mail quando ela entrar no KEV, ganhar PoC pública ou subir de nota.
13Vexday Risk Score
Sem sinal de exploração. Nenhum artefato público de exploração conhecido até agora.
ssvc Trackcvss 4epss 0.4%
Improper Restriction of Rendered UI Layers or Frames in GitHub repository cockpit-hq/cockpit prior to 2.3.9-dev.
CVSS:3.0/AV:L/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N
Produtos afetados
cockpit-hq · cockpit-hq/cockpitCVEs relacionadas — cockpit-hq/cockpit
No mesmo produto, das mais perigosas para as menos.
CVE-2023-4451MEDIUMCross-site Scripting (XSS) - Reflected in cockpit-hq/cockpitEPSS 2.5%CVE-2022-2818CRITICALImproper Removal of Sensitive Information Before Storage or Transfer in cockpit-hq/cockpitEPSS 1.7%CVE-2022-2713HIGHInsufficient Session Expiration in cockpit-hq/cockpitEPSS 1.3%CVE-2023-4195CRITICALPHP Remote File Inclusion in cockpit-hq/cockpitEPSS 1.1%CVE-2023-1313HIGHUnrestricted Upload of File with Dangerous Type in cockpit-hq/cockpitEPSS 1.0%CVE-2023-4422MEDIUMCross-site Scripting (XSS) - Stored in cockpit-hq/cockpitEPSS 0.6%