Cockpit Cms
Approved changes feed: RSS · Atom
cpe:2.3:a:agentejo:cockpit_cms:*:*:*:*:*:*:*:*
part: a version: * update: *
| Vendor | Agentejo (02c136de-97d7-53c1-b8e8-80de5a40c5de) |
|---|---|
| Product | Cockpit Cms (c21d7c35-26b0-5f75-8857-9c9f5f31b4d7) |
| Edition | * |
| Language | * |
| Software edition | * |
| Target software | * |
| Target hardware | * |
| Other | * |
| Notes | Imported from gcve-enriched-dumps CVE data |
PURL mappings
| PURL | Source | Last updated |
|---|---|---|
| No PURL mappings for this CPE yet. | ||
Vulnerability references
| Identifier | cpeApplicability | Submitted | db.gcve.eu details | Rationale |
|---|---|---|---|---|
CVE:CVE-2026-13533 |
vulnerable | 2026-07-29 00:23:33.146130 |
agentejo Cockpit CMS htaccess config.yaml YAMLLoad file access
MEDIUM (5.3)
A security vulnerability has been detected in agentejo Cockpit CMS up to 0.12.2. Affected by this issue is the function Spyc::YAMLLoad of the file /config/config.yaml of the component htaccess Handler. Such manipulation leads to files or directories accessible. It is possible to launch the attack remotely. The exploit has been disclosed publicly and may be used. Configuration settings should be changed. The vendor was contacted early about this disclosure but did not respond in any way.
Published: 2026-06-29T04:00:07.810Z
Updated: 2026-06-29T14:52:49.021Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2024-4825 |
vulnerable | 2026-06-08 06:50:18.764366 |
Unrestricted Upload of File with Dangerous Type vulnerability on Cockpit CMS from Agentejo
CRITICAL (9.8)
A vulnerability has been discovered in Agentejo Cockpit CMS v0.5.5 that consists in an arbitrary file upload in ‘/media/api’ parameter via post request. An attacker could upload files to the server, compromising the entire infrastructure.
Published: 2024-05-13T11:23:20.416Z
Updated: 2024-08-01T20:55:10.120Z |
Imported from gcve-enriched-dumps CVE data |
Contribute
You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.