CVE-2023-41564

An arbitrary file upload vulnerability in the Upload Asset function of Cockpit CMS v2.6.3 allows attackers to execute arbitrary code via uploading a crafted…

published September 8, 2023

CVSS
—
EPSS
1%
Percentile
61.9
In the wild
Unconfirmed
What it is

An arbitrary file upload vulnerability in the Upload Asset function of Cockpit CMS v2.6.3 allows attackers to execute arbitrary code via uploading a crafted .shtml file.

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.00980 · 61.9th percentile
Published
2023-09-08T00:00Z
EPSS history
Timeline
  • 08 SEP 00:00Z
    An arbitrary file upload vulnerability in the Upload Asset function of Cockpit CMS v2.6.3 allows attackers to execute arbitrary code via uploading a crafted…
    cvelistv5