Getcockpit Cockpit
2 CVEs affecting Getcockpit Cockpit. Latest disclosed: 2018-05-25. Critical: 1, High: 0.
| CVE | Severity | Score | Published | Summary |
|---|---|---|---|---|
CVE-2018-9302 | Critical | 9.1 | 2018-05-02 | SSRF (Server Side Request Forgery) in /assets/lib/fuc.js.php in Cockpit 0.4.4 through 0.5.5 allows remote attackers to read arbitrary files or send TCP traffic… |
CVE-2018-11471 | Medium | 5.4 | 2018-05-25 | Cockpit 0.5.5 has XSS via a collection, form, or region. |