CVE-2023-4422: Cockpit Cross-site Scripting vulnerability
Cockpit Cross-site Scripting vulnerability
Other sources
Cross-site Scripting (XSS) - Stored in GitHub repository cockpit-hq/cockpit prior to 2.6.3.
Affected Software
Remediation
Recommended actions to resolve this vulnerability, in priority order.
- Upgrade
Upgrade
composer/cockpit-hq/cockpitto a version that resolves this vulnerability.Fixed in 2.6.3
Event History
Frequently Asked Questions
What is CVE-2023-4422?
CVE-2023-4422 is a vulnerability related to Cross-site Scripting (XSS) that was found in the GitHub repository cockpit-hq/cockpit prior to version 2.6.3.
How severe is CVE-2023-4422?
CVE-2023-4422 has a severity level of 6.8 (medium).
What software is affected by CVE-2023-4422?
The software affected by CVE-2023-4422 includes the GitHub repository cockpit-hq/cockpit prior to version 2.6.3 and Agentejo Cockpit up to version 2.6.3.
What is the Common Vulnerabilities and Exposures (CVE) ID for this vulnerability?
The Common Vulnerabilities and Exposures (CVE) ID for this vulnerability is CVE-2023-4422.
How can I fix CVE-2023-4422?
To fix CVE-2023-4422, you need to update your cockpit-hq/cockpit software to version 2.6.3 or higher.