CVE-2024-2001
CVSS V2 None
CVSS V3 None
Description
A Cross-Site Scripting vulnerability in Cockpit CMS affecting version 2.7.0. This vulnerability could allow an authenticated user to upload an infected PDF file and store a malicious JavaScript payload to be executed when the file is uploaded.
Overview
- CVE ID
- CVE-2024-2001
- Assigner
- INCIBE
- Vulnerability Status
- PUBLISHED
- Published Version
- 2024-02-29T13:30:54.169Z
- Last Modified Date
- 2024-06-04T17:29:39.285Z
Weakness Enumerations
References
Reference URL | Reference Tags |
---|---|
https://www.incibe.es/en/incibe-cert/notices/aviso/cross-site-scripting-vulnerability-cockpit-cms |
Sources
Source Name | Source URL |
---|---|
NIST | https://nvd.nist.gov/vuln/detail/CVE-2024-2001 |
MITRE | https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-2001 |
History
Created | Old Value | New Value | Data Type | Notes |
---|---|---|---|---|
2024-06-26 00:09:52 | Added to TrackCVE |