GHSA-xcq3-7pf3-5jvc

ghsaUSosv

Cockpit PHP Remote File Inclusion vulnerability

view advisory published 2023-08-06Licence: CC-BY-4.0

PHP Remote File Inclusion in GitHub repository cockpit-hq/cockpit prior to 2.6.3. Users may upload php files through the system file upload utility to obtain remote code execution.

describes (1)

Related CVEs.

ID	severity	EPSS	exploitable	published
CVE-2023-4195US	high8.8	1.05% (64th)	—	2023-08-06
PHP Remote File Inclusion in GitHub repository cockpit-hq/cockpit prior to 2.6.3.

references

External citations — patches, advisories, analysis.

https://github.com/cockpit-hq/cockpitPACKAGE
https://github.com/cockpit-hq/cockpit/commit/800c05f1984db291769ffa5fdfb1d3e50968e95bWEB
https://huntr.dev/bounties/0bd5da2f-0e29-47ce-90f3-06518656bfd6WEB
https://nvd.nist.gov/vuln/detail/CVE-2023-4195ADVISORY

scry

Advisories like this name the exposed products attackers go after on your perimeter. See what is exposed on your perimeter with a free passive scan.

Free scan