Staging Environment: Content and features may be unstable or change without notice.

Advisory Weakness Curation

CVE-2023-41564

Progress 0 / 0

Advisory Summaries

github_osv/GHSA-38vf-35cg-m73w

Cockpit CMS arbitrary file upload vulnerability An arbitrary file upload vulnerability in the Upload Asset function of Cockpit CMS v2.6.3 allows attackers to execute arbitrary code via uploading a crafted `.shtml` file.

gitlab/packagist/cockpit-hq/cockpit/CVE-2023-41564

Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection') An arbitrary file upload vulnerability in the Upload Asset function of Cockpit CMS v2.6.3 allows attackers to execute arbitrary code via uploading a crafted .shtml file.