CVE-2025-7053
1 advisory.
Packagist/cockpit-hq/cockpit CVE-2025-7053: low 3.5, EPSS 0.35%
Cockpit - Content Platform vulnerable to XSS through name or email argument names
Action: Upgrade cockpit-hq/cockpit to 2.11.4 or later.
composer require cockpit-hq/cockpit:2.11.4Affected
| introduced | fixed | last affected |
|---|---|---|
| 0 | 2.11.4 | - |
Fixed versions
| 2.11.4 |
Sources
- osv: GHSA-j4rj-fgcq-wmqp
- https://nvd.nist.gov/vuln/detail/CVE-2025-7053
- https://github.com/Cockpit-HQ/Cockpit/commit/bdcd5e3bc651c0839c7eea807f3eb6af856dbc76
- https://github.com/Cockpit-HQ/Cockpit
- https://github.com/Cockpit-HQ/Cockpit/releases/tag/2.11.4
- https://vuldb.com/?ctiid.314819
- https://vuldb.com/?id.314819
- https://vuldb.com/?submit.605594
CVE-2025-7053 · published · modified · JSON