CVE-2023-4432: falha de alta gravidade em cockpit-hq/cockpit
Cross-site Scripting (XSS) - Reflected in cockpit-hq/cockpit
Publicada em · Atualizada em
Aviso por e-mail quando ela entrar no KEV, ganhar PoC pública ou subir de nota.
21Vexday Risk Score
Sem sinal de exploração. Nenhum artefato público de exploração conhecido até agora.
ssvc Trackcvss 8.3epss 0.6%
Cross-site Scripting (XSS) - Reflected in GitHub repository cockpit-hq/cockpit prior to 2.6.4.
CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:L
Produtos afetados
cockpit-hq · cockpit-hq/cockpitCVEs relacionadas — cockpit-hq/cockpit
No mesmo produto, das mais perigosas para as menos.
CVE-2023-4451MEDIUMCross-site Scripting (XSS) - Reflected in cockpit-hq/cockpitEPSS 2.5%CVE-2022-2818CRITICALImproper Removal of Sensitive Information Before Storage or Transfer in cockpit-hq/cockpitEPSS 1.7%CVE-2022-2713HIGHInsufficient Session Expiration in cockpit-hq/cockpitEPSS 1.3%CVE-2023-4195CRITICALPHP Remote File Inclusion in cockpit-hq/cockpitEPSS 1.1%CVE-2023-1313HIGHUnrestricted Upload of File with Dangerous Type in cockpit-hq/cockpitEPSS 1.0%CVE-2023-4422MEDIUMCross-site Scripting (XSS) - Stored in cockpit-hq/cockpitEPSS 0.6%