A vulnerability has been discovered in Agentejo Cockpit CMS v0.5.5 that consists in an arbitrary file upload in ‘/media/api’ parameter via post request. An attacker could upload files to the server, compromising the entire infrastructure.
| Package (Ecosystem) | Introduced | Fixed | Limit |
|---|---|---|---|
| cockpit-hq/cockpit(Packagist) | 0 | 2.7.0 | N/A |
CVSS Metrics
