CVE-2023-4321: Cockpit Cross-site Scripting vulnerability
Cockpit Cross-site Scripting vulnerability
Other sources
Cross-site Scripting (XSS) - Stored in GitHub repository cockpit-hq/cockpit 2.6.2 and prior. A patch is available at commit 34ab31ee9362da51b9709e178469dbffd7717249.
Cross-site Scripting (XSS) - Stored in GitHub repository cockpit-hq/cockpit prior to 2.4.3.
— MITRE
Affected Software
Remediation
Recommended actions to resolve this vulnerability, in priority order.
- Upgrade
Upgrade
cockpit-hq/cockpitto a version that resolves this vulnerability.Patch 34ab31ee9362da51b9709e178469dbffd7717249
Event History
Frequently Asked Questions
What is the severity of CVE-2023-4321?
The severity of CVE-2023-4321 is high with a severity value of 8.3.
What is the description of CVE-2023-4321?
CVE-2023-4321 is a Cross-site Scripting (XSS) vulnerability that is stored in the GitHub repository cockpit-hq/cockpit prior to version 2.4.3.
Which software versions are affected by CVE-2023-4321?
Versions prior to 2.4.3 of cockpit-hq/cockpit and versions up to 2.6.2 of Agentejo Cockpit are affected by CVE-2023-4321.
Is there a patch available for CVE-2023-4321?
Yes, a patch is available at commit 34ab31ee9362da51b9709e178469dbffd7717249.
What is the Common Weakness Enumeration (CWE) ID for CVE-2023-4321?
The CWE ID for CVE-2023-4321 is 79.