CVE-2023-37650

Published July 20th, 2023

View on NVD ↗

CVSS v3

8.8

HIGH

CVSS v2

N/A

Affected

1

PROJECT

Description

A Cross-Site Request Forgery (CSRF) in the Admin portal of Cockpit CMS v2.5.2 allows attackers to execute arbitrary Administrator commands.

Cockpit-HQ/Cockpit

Cockpit Core - Content Platform

GitHub

725