CVE-2023-4395: Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')

August 17, 2023

Cross-site Scripting (XSS) - Stored in GitHub repository cockpit-hq/cockpit prior to 2.6.4.

References

github.com/advisories/GHSA-5cv4-48h7-7782
github.com/cockpit-hq/cockpit/commit/36d1d4d256cbbab028342ba10cc493e5c119172c
huntr.dev/bounties/60e38563-7ac8-4a13-ac04-2980cc48b0da
nvd.nist.gov/vuln/detail/CVE-2023-4395

Detect and mitigate CVE-2023-4395 with GitLab Dependency Scanning

Secure your software supply chain by verifying that all open source dependencies used in your projects contain no disclosed vulnerabilities. Learn more about Dependency Scanning →