CVE-2023-4321: Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')

August 14, 2023

Cross-site Scripting (XSS) - Stored in GitHub repository cockpit-hq/cockpit prior to 2.4.3.

References

github.com/advisories/GHSA-3vf5-xm2p-6mh5
github.com/cockpit-hq/cockpit/commit/34ab31ee9362da51b9709e178469dbffd7717249
huntr.dev/bounties/fce38751-bfd6-484c-b6e1-935e0aa8ffdc
nvd.nist.gov/vuln/detail/CVE-2023-4321

Detect and mitigate CVE-2023-4321 with GitLab Dependency Scanning

Secure your software supply chain by verifying that all open source dependencies used in your projects contain no disclosed vulnerabilities. Learn more about Dependency Scanning →