GitHub Advisoryadvisory · Packagist

GHSA-86rf-38v8-9c4x privilege chaining in cockpit-hq/cockpit

HIGH Published 2023-02-09 Modified 2023-02-16 Official page ↗

Aliases: CVE-2023-0759
Ecosystem: Packagist
Packages: cockpit-hq/cockpit
Severity: High
CVSS vector: CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
Weaknesses: CWE-268
Reviewed: 2023-02-09

Affected packages

• Packagist cockpit-hq/cockpit: < 2.3.8 → fixed in 2.3.8

Description

Privilege Chaining in GitHub repository cockpit-hq/cockpit prior to 2.3.8.

Related

Alias · CVE (1)

CVE-2023-0759 Privilege Chaining in GitHub repository cockpit-hq/cockpit prior to 2.3.8. vulnerability

Weakness · CWE (1)

CWE-268 Privilege Chaining weakness

References