CVE-2023-4321
MediumCVSS 6.1Exploitation Probability (EPSS)
Low risk42th percentile - higher than 42% of all known CVEs
Summary
A Cross-site Scripting (XSS) vulnerability exists in the GitHub repository cockpit-hq/cockpit prior to version 2.4.3, allowing for the storage of malicious code.
Risk Assessment
An attacker could exploit this vulnerability to inject malicious scripts, potentially leading to user data theft or session hijacking.
Recommendation
It is recommended to upgrade to version 2.4.3 or later to mitigate this vulnerability.
Other vulnerabilities in GitHub repository cockpit-hq/cockpit
See all- CVE-2023-4433Medium
A Cross-site Scripting (XSS) vulnerability exists in the GitHub repository cockpit-hq/cockpit prior to version 2.6.4, allowing for the storage of malicious code.
- CVE-2023-4422Medium
A Cross-site Scripting (XSS) vulnerability exists in the GitHub repository cockpit-hq/cockpit prior to version 2.6.3, allowing for the storage of malicious code.
- CVE-2023-4395Medium
A Cross-site Scripting (XSS) vulnerability exists in the GitHub repository cockpit-hq/cockpit prior to version 2.6.4, allowing for the storage of malicious code.
Original NVD description (English source)
Cross-site Scripting (XSS) - Stored in GitHub repository cockpit-hq/cockpit prior to 2.4.3.
Vulnerability data from NVD (NIST) · CISA KEV · EPSS