CVE-2023-0780: Improper Restriction of Rendered UI Layers or Frames in cockpit-hq/cockpit
Improper Restriction of Rendered UI Layers or Frames in cockpit-hq/cockpit
Other sources
Improper Restriction of Rendered UI Layers or Frames in GitHub repository cockpit-hq/cockpit prior to 2.3.9-dev.
Affected Software
Remediation
Recommended actions to resolve this vulnerability, in priority order.
- Upgrade
Upgrade
composer/cockpit-hq/cockpitto a version that resolves this vulnerability.Fixed in 2.3.9 - Upgrade
Upgrade
cockpit-hq/cockpitto a version that resolves this vulnerability.Fixed in 2.3.9
Event History
Frequently Asked Questions
What is the vulnerability ID for this issue?
The vulnerability ID for this issue is CVE-2023-0780.
What is the severity rating of CVE-2023-0780?
CVE-2023-0780 has a severity rating of medium, with a value of 5.4.
What is the affected software for CVE-2023-0780?
The affected software for CVE-2023-0780 is Agentejo Cockpit version up to exclusive 2.3.9.
How can I fix CVE-2023-0780?
To fix CVE-2023-0780, update Agentejo Cockpit to version 2.3.9 or higher.
Where can I find more information about CVE-2023-0780?
You can find more information about CVE-2023-0780 in the references: [GitHub commit](https://github.com/cockpit-hq/cockpit/commit/8450bdf7e1dc23e9d88adf30a2aa9101c0c41720) and [Huntr bounty](https://huntr.dev/bounties/801efd0b-404b-4670-961a-12a986252fa4).