CVE-2023-37649
Incorrect access control in the component /models/Content of Cockpit CMS v2.5.2 allows unauthorized attackers to access sensitive data.
- Обновитесь до 2.6.0
PatchFirst · Свежие уязвимости
За последние 30 дней в cockpit-hq/cockpit опубликовано уязвимостей: 0; в каталоге KEV: 0.
Уязвимостей: 26
Incorrect access control in the component /models/Content of Cockpit CMS v2.5.2 allows unauthorized attackers to access sensitive data.
Unrestricted Upload of File with Dangerous Type in GitHub repository cockpit-hq/cockpit prior to 2.4.1.
Use of Platform-Dependent Third Party Components in GitHub repository cockpit-hq/cockpit prior to 2.4.0.
Improper Restriction of Rendered UI Layers or Frames in GitHub repository cockpit-hq/cockpit prior to 2.3.9-dev.
Privilege Chaining in GitHub repository cockpit-hq/cockpit prior to 2.3.8.
Improper Removal of Sensitive Information Before Storage or Transfer in GitHub repository cockpit-hq/cockpit prior to 2.2.2.
Сопоставьте установленный стек и версии со свежими базами уязвимостей.