CVE-2023-1313: cockpit-hq/cockpit is vulnerable to unrestricted file uploads
cockpit-hq/cockpit is vulnerable to unrestricted file uploads
Other sources
Unrestricted Upload of File with Dangerous Type in GitHub repository cockpit-hq/cockpit prior to 2.4.1.
Affected Software
Remediation
Recommended actions to resolve this vulnerability, in priority order.
- Upgrade
Upgrade
composer/cockpit-hq/cockpitto a version that resolves this vulnerability.Fixed in 2.4.1 - Upgrade
Upgrade
cockpit-hq/cockpitto a version that resolves this vulnerability.Fixed in 2.4.1
Event History
Frequently Asked Questions
What is the severity of CVE-2023-1313?
The severity of CVE-2023-1313 is high (8.8).
What is CVE-2023-1313?
CVE-2023-1313 is an unrestricted upload of a file with a dangerous type vulnerability in the GitHub repository cockpit-hq/cockpit prior to version 2.4.1.
How does CVE-2023-1313 affect Agentejo Cockpit?
CVE-2023-1313 affects Agentejo Cockpit version up to and including 2.4.0.
How can I fix CVE-2023-1313?
To fix CVE-2023-1313, update Agentejo Cockpit to version 2.4.1 or later.
Is there any additional information available about CVE-2023-1313?
Additional information about CVE-2023-1313 can be found in the references: [GitHub Commit](https://github.com/cockpit-hq/cockpit/commit/becca806c7071ecc732521bb5ad0bb9c64299592), [Huntr Dev](https://huntr.dev/bounties/f73eef49-004f-4b3b-9717-90525e65ba61)