CVE-2023-41564: Cockpit CMS arbitrary file upload vulnerability
An arbitrary file upload vulnerability in the Upload Asset function of Cockpit CMS v2.6.3 allows attackers to execute arbitrary code via uploading a crafted .shtml file.
Other sources
An arbitrary file upload vulnerability in the Upload Asset function of Cockpit CMS v2.6.3 allows attackers to execute arbitrary code via uploading a crafted .shtml file.
Cockpit CMS arbitrary file upload vulnerability
— Packagist
Affected Software
Event History
Frequently Asked Questions
What is CVE-2023-41564?
CVE-2023-41564 is an arbitrary file upload vulnerability in the Upload Asset function of Cockpit CMS v2.6.3.
How does CVE-2023-41564 allow attackers to execute arbitrary code?
CVE-2023-41564 allows attackers to execute arbitrary code by uploading a crafted `.shtml` file.
Which version of Cockpit CMS is affected by CVE-2023-41564?
Cockpit CMS v2.6.3 is affected by CVE-2023-41564.
What is the severity rating of CVE-2023-41564?
CVE-2023-41564 has a severity rating of 6.1 (Medium).
How can I fix CVE-2023-41564?
To fix CVE-2023-41564, update Cockpit CMS to a version that does not have this vulnerability.