CVE-2023-4195: Cockpit PHP Remote File Inclusion vulnerability
Cockpit PHP Remote File Inclusion vulnerability
Other sources
PHP Remote File Inclusion in GitHub repository cockpit-hq/cockpit prior to 2.6.3.
Affected Software
Remediation
Recommended actions to resolve this vulnerability, in priority order.
- Upgrade
Upgrade
composer/cockpit-hq/cockpitto a version that resolves this vulnerability.Fixed in 2.6.3
Event History
Frequently Asked Questions
What is CVE-2023-4195?
CVE-2023-4195 is a vulnerability that allows for PHP Remote File Inclusion in the GitHub repository cockpit-hq/cockpit prior to version 2.6.3.
How does CVE-2023-4195 work?
CVE-2023-4195 works by allowing users to upload php files through the system file upload utility, which can then be used to execute remote code.
How severe is CVE-2023-4195?
CVE-2023-4195 has a severity keyword of 'critical' and a severity value of 9.9.
Which software versions are affected by CVE-2023-4195?
Versions of the GitHub repository cockpit-hq/cockpit prior to 2.6.3 and Agentejo Cockpit up to version 2.6.3 are affected by CVE-2023-4195.
How can I fix CVE-2023-4195?
To fix CVE-2023-4195, update to version 2.6.3 of the cockpit-hq/cockpit GitHub repository or Agentejo Cockpit.