CVE-2023-4196: Cockpit Cross-site Scripting vulnerability
Cockpit Cross-site Scripting vulnerability
Other sources
Cross-site Scripting (XSS) - Stored in GitHub repository cockpit-hq/cockpit prior to 2.6.3.
Affected Software
Remediation
Recommended actions to resolve this vulnerability, in priority order.
- Upgrade
Upgrade
composer/cockpit-hq/cockpitto a version that resolves this vulnerability.Fixed in 2.6.3
Event History
Frequently Asked Questions
What is CVE-2023-4196?
CVE-2023-4196 is a vulnerability that allows for Cross-site Scripting (XSS) attacks in the GitHub repository cockpit-hq/cockpit prior to version 2.6.3.
How severe is CVE-2023-4196?
CVE-2023-4196 has a severity rating of 8.3, which is considered high.
How can the CVE-2023-4196 vulnerability be exploited?
The CVE-2023-4196 vulnerability can be exploited by uploading an HTML file to execute malicious code on a targeted website.
What software is affected by CVE-2023-4196?
The GitHub repository cockpit-hq/cockpit prior to version 2.6.3 is affected by CVE-2023-4196.
How can CVE-2023-4196 be remediated?
To fix CVE-2023-4196, you should update the affected software to version 2.6.3 or higher.