{"action":"Upgrade cockpit-hq/cockpit to 2.4.1 or later.","affected":[{"fixed":"2.4.1","introduced":"0"}],"component":"cockpit-hq/cockpit","cve_ids":["CVE-2023-1313"],"ecosystem":"Packagist","epss":0.00987,"exploited":false,"fixed_versions":["2.4.1"],"ghsa_id":"GHSA-6x8f-x6qw-qwx3","id":"tcs_01M5KEXGAZQMMZBGTQV1YSJH2X","modified_at":"2023-11-08T04:11:16.167751Z","published_at":"2023-03-10T12:30:16Z","references":["https://osv.dev/vulnerability/GHSA-6x8f-x6qw-qwx3","https://nvd.nist.gov/vuln/detail/CVE-2023-1313","https://github.com/cockpit-hq/cockpit/commit/becca806c7071ecc732521bb5ad0bb9c64299592","https://github.com/Cockpit-HQ/Cockpit","https://huntr.dev/bounties/f73eef49-004f-4b3b-9717-90525e65ba61"],"severity":{"label":"high","score":8.8},"sources":[{"source":"osv","source_id":"GHSA-6x8f-x6qw-qwx3","url":"https://osv.dev/vulnerability/GHSA-6x8f-x6qw-qwx3"}],"summary":"cockpit-hq/cockpit is vulnerable to unrestricted file uploads"}