Approved changes feed: RSS · Atom

cpe:2.3:a:agentejo:cockpit:0.5.5:*:*:*:*:*:*:*

part: a version: 0.5.5 update: *

VendorAgentejo (02c136de-97d7-53c1-b8e8-80de5a40c5de)
ProductCockpit (a587ef46-c7d3-52ac-bc49-e6d5cda524ac)
Edition*
Language*
Software edition*
Target software*
Target hardware*
Other*
NotesImported from NVD CPE 2.0 feed

PURL mappings

PURLSourceLast updated
pkg:github/agentejo/cockpit purl2cpe 2026-06-01 10:16:22.646761

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2024-4825 vulnerable 2026-06-08 06:50:18.763298 Unrestricted Upload of File with Dangerous Type vulnerability on Cockpit CMS from Agentejo
CRITICAL (9.8)
A vulnerability has been discovered in Agentejo Cockpit CMS v0.5.5 that consists in an arbitrary file upload in ‘/media/api’ parameter via post request. An attacker could upload files to the server, compromising the entire infrastructure.
Published: 2024-05-13T11:23:20.416Z
Updated: 2024-08-01T20:55:10.120Z
Reference links
Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.