Cockpit-hq/cockpit vulnerabilities
We track 1 vulnerability in Cockpit-hq/cockpit products. 1 is rated high or critical, and none are known to be exploited. The most recent was published on February 5, 2025.
1vulnerabilities
0critical
1high
0exploited
7.5average CVSS score
Latest Cockpit-hq/cockpit vulnerabilities
- 7.5 High severity
cockpit-hq/cockpit: Unrestricted Upload of File with Dangerous Type
Versions of the package cockpit-hq/cockpit before 2.4.1 are vulnerable to Arbitrary File Upload where an attacker can use different extension to bypass the upload filter.