Vendor/product archive

getcockpit / cockpit CVEs

Beta · best-effort

2 CVEs tagged to getcockpit / cockpit — 1 Critical, 0 High, 1 Medium, 0 Low, 0 Unrated.

See this archive with more filters Back to getcockpit vendor archive

CVE-2018-11471

Published May 25, 2018

Cockpit 0.5.5 has XSS via a collection, form, or region.

CVSS 5.4 · Medium

Vendor/product tagsBeta · best-effort

CVE-2018-9302

Published May 2, 2018

SSRF (Server Side Request Forgery) in /assets/lib/fuc.js.php in Cockpit 0.4.4 through 0.5.5 allows remote attackers to read arbitrary files or send TCP traffic to intranet hosts v…

CVSS 9.1 · Critical

Vendor/product tagsBeta · best-effort

Showing 1-2 of 2 CVEsPage 1 of 1