Skip to content
OpenAdvisories

Vendor

agentejo

2 known vulnerabilities.

Products

Cockpit CMS 2
All Critical High Medium Low Exploited only Public exploit

1 result · Clear filters · Feed

  • Critical 9.8
    CVE-2024-4825

    Unrestricted Upload of File with Dangerous Type vulnerability on Cockpit CMS from Agentejo

    A vulnerability has been discovered in Agentejo Cockpit CMS v0.5.5 that consists in an arbitrary file upload in ‘/media/api’ parameter via post request. An attacker could upload files to the server, compromising the entire infrastructure.

    agentejo Cockpit CMS cockpit-hq/cockpit Packagist