PHP Remote File Inclusion in cockpit-hq/cockpit

CVE-2023-4195

What is CVE-2023-4195?

This vulnerability in the Cockpit application prior to version 2.6.3 allows an attacker to exploit Remote File Inclusion (RFI) vulnerabilities through manipulated file paths. By successfully triggering this flaw, unauthorized files from a remote server can be included and executed on the vulnerable application, potentially leading to sensitive data exposure and further malicious actions. It's critical for organizations utilizing this product to apply security patches promptly and review their system configurations.

References