Security Advisories
CVEs affecting projects tracked on Release Alert, from NVD & OSV.
CVE-2020-35847
9.8
CRITICALCVSS v3
Published
December 30, 2020
CVSS v2
7.5 HIGH
Affected
1 project
Assigned by
MITRE
Severity scale
010
Description
Agentejo Cockpit before 0.11.2 allows NoSQL injection via the Controller/Auth.php resetpassword function.
agentejo/cockpit
GitHubAdd content management functionality to any site - plug & play / headless / api-first CMS
GitHubAdd content management functionality to any site - plug & play / headless / api-first CMS< 0.11.2NVD