Security Advisories
CVEs affecting projects tracked on Release Alert, from NVD & OSV.
CVE-2023-41564
6.1
MEDIUMCVSS v3
Published
September 8, 2023
Affected
1 project
Assigned by
MITRE
Severity scale
010
Description
An arbitrary file upload vulnerability in the Upload Asset function of Cockpit CMS v2.6.3 allows attackers to execute arbitrary code via uploading a crafted .shtml file.
agentejo/cockpit
GitHubAdd content management functionality to any site - plug & play / headless / api-first CMS
GitHubAdd content management functionality to any site - plug & play / headless / api-first CMS= 2.6.3NVD