MEDIUM6.1

GHSA-g3mv-64h3-h482

Cockpit Cross-site Scripting vulnerability

Details

Cross-site Scripting (XSS) - Reflected in GitHub repository cockpit-hq/cockpit version 2.6.3 and prior. A patch is available at commit 30609466c817e39f9de1871559603e93cd4d0d0c and anticipated to be part of version 2.6.4.

Are you affected?

Enter the version of the package you're using.

Affected packages

Packagist/cockpit-hq/cockpit

Introduced in: 0

No fixed version published yet for cockpit-hq/cockpit (composer). Pin to a known-safe version or switch to an alternative.

References

https://nvd.nist.gov/vuln/detail/CVE-2023-4451[ADVISORY]
https://github.com/cockpit-hq/cockpit/commit/30609466c817e39f9de1871559603e93cd4d0d0c[WEB]
https://github.com/cockpit-hq/cockpit[PACKAGE]
https://huntr.dev/bounties/4e111c3e-6cf3-4b4c-b3c1-a540bf30f8fa[WEB]