CVE-2024-2001: Cockpit CMS Cross-Site Scripting vulnerability
Published Feb 29, 2024
·Updated
A Cross-Site Scripting vulnerability in Cockpit CMS affecting version 2.7.0. This vulnerability could allow an authenticated user to upload an infected PDF file and store a malicious JavaScript payload to be executed when the file is uploaded.
Other sources
Cockpit CMS Cross-Site Scripting vulnerability
— Packagist
Affected Software
3 affected components
composer/cockpit-hq/cockpit=2.7.0
Agentejo Cockpit=2.7.0
composer/cockpit-hq/cockpit=2.7.0
Event History
Feb 29, 2024
CVE Published
via MITRE·01:30 PM
Data Sourced
via MITRE·01:30 PM
RemedyDescriptionSeverityWeakness
Data Sourced
via NVD·02:15 PM
DescriptionSeverityWeaknessAffected Software
Advisory Published
via GitHub·03:32 PM
Data Sourced
via GitHub·03:32 PM
DescriptionSeverityWeaknessAffected Software
Data Sourced
via Packagist·03:32 PM
DescriptionSeverityAffected Software