Description
A Cross-Site Request Forgery (CSRF) in the Admin portal of Cockpit CMS v2.5.2 allows attackers to execute arbitrary Administrator commands.
Affected packages
| Ecosystem | Package | Affected | Fixed | Record |
|---|---|---|---|---|
| Packagist | cockpit-hq/cockpit | < 2.6.0 | 2.6.0 | GHSA-45g2-r339-pjwf |