Cross-site Scripting (XSS) - Reflected in cockpit-hq/cockpit

CVE-2023-4432

What is CVE-2023-4432?

A reflected Cross-site Scripting (XSS) vulnerability exists in the Cockpit software, which could allow an attacker to inject malicious scripts into web pages viewed by users. This issue affects versions prior to 2.6.4, enabling potential exploitation if an attacker can trick a user into clicking a malicious link that processes arbitrary input. Prompt updates and security practices are essential to mitigate potential threats.

References