CVE-2023-41564

Source
https://cve.org/CVERecord?id=CVE-2023-41564
Import Source
https://storage.googleapis.com/osv-test-cve-osv-conversion/osv-output/CVE-2023-41564.json
JSON Data
https://api.test.osv.dev/v1/vulns/CVE-2023-41564
Aliases
Published
2023-09-08T00:00:00Z
Modified
2026-05-15T04:07:14.044606154Z
Summary
[none]
Details

An arbitrary file upload vulnerability in the Upload Asset function of Cockpit CMS v2.6.3 allows attackers to execute arbitrary code via uploading a crafted .shtml file.

Database specific
{
    "cna_assigner": "mitre",
    "osv_generated_from": "https://github.com/CVEProject/cvelistV5/tree/main/cves/2023/41xxx/CVE-2023-41564.json"
}
References

Affected packages