CVE-2023-37650

HIGH8.8EPSS 1.0%

Cockpit CMS Cross-Site Request Forgery vulnerability

Published: 7/20/2023Modified: 2/19/2024

Description

A Cross-Site Request Forgery (CSRF) in the Admin portal of Cockpit CMS v2.5.2 allows attackers to execute arbitrary Administrator commands.

Affected packages (1)

CVSS scores

SourceVersionSeverityVector
osvCVSS 3.1HIGH8.8CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H

References (4)