CVE-2023-4451

MediumCVSS 6.1

Published: 20/08/2023(UTC)Updated: 17/06/2026(UTC)Translated: 18/06/2026(UTC)NVD NIST

Exploitation Probability (EPSS)

High risk

2.27%

81th percentile - higher than 81% of all known CVEs

A Cross-site Scripting (XSS) reflected vulnerability exists in the GitHub repository cockpit-hq/cockpit prior to version 2.6.4.

An attacker could exploit this vulnerability to inject malicious JavaScript code, potentially leading to user data theft or session hijacking.

It is recommended to upgrade to version 2.6.4 or later to mitigate this vulnerability.

Original NVD description (English source)

Cross-site Scripting (XSS) - Reflected in GitHub repository cockpit-hq/cockpit prior to 2.6.4.