CVE-2023-4195
HighCVSS 8.8Exploitation Probability (EPSS)
Elevated risk51th percentile - higher than 51% of all known CVEs
Summary
A PHP Remote File Inclusion vulnerability exists in the GitHub repository cockpit-hq/cockpit prior to version 2.6.3.
Risk Assessment
An attacker could exploit this vulnerability to remotely load and execute malicious code on the server, potentially compromising the system.
Recommendation
It is recommended to upgrade to version 2.6.3 or later to mitigate this vulnerability.
Other vulnerabilities in cockpit-hq/cockpit
See all- CVE-2023-4451Medium
A Cross-site Scripting (XSS) reflected vulnerability exists in the GitHub repository cockpit-hq/cockpit prior to version 2.6.4.
- CVE-2023-4432Medium
A Cross-site Scripting (XSS) vulnerability, reflected, exists in the GitHub repository cockpit-hq/cockpit prior to version 2.6.4. An attacker can exploit this vulnerability to inject malicious scripts in the context of the victim's browser.
- CVE-2023-4196Medium
A Cross-site Scripting (XSS) vulnerability exists in the GitHub repository cockpit-hq/cockpit prior to version 2.6.3, allowing for the storage of malicious code.
Original NVD description (English source)
PHP Remote File Inclusion in GitHub repository cockpit-hq/cockpit prior to 2.6.3.