{"action":"Upgrade cockpit-hq/cockpit to 2.2.2 or later.","affected":[{"fixed":"2.2.2","introduced":"0"}],"component":"cockpit-hq/cockpit","cve_ids":["CVE-2022-2818"],"ecosystem":"Packagist","epss":0.01673,"exploited":false,"fixed_versions":["2.2.2"],"ghsa_id":"GHSA-8wj3-cpmr-8whp","id":"tcs_01M5KEZE0EM2TMAK9F3SBYE6EA","modified_at":"2024-02-16T08:04:13.103329Z","published_at":"2022-08-16T00:00:30Z","references":["https://osv.dev/vulnerability/GHSA-8wj3-cpmr-8whp","https://nvd.nist.gov/vuln/detail/CVE-2022-2818","https://github.com/cockpit-hq/cockpit/commit/4bee1b903ee20818f4a8ecb9d974b9536cc54cb4","https://github.com/cockpit-hq/cockpit","https://huntr.dev/bounties/ee27e5df-516b-4cf4-9f28-346d907b5491"],"severity":{"label":"high","score":8.8},"sources":[{"source":"osv","source_id":"GHSA-8wj3-cpmr-8whp","url":"https://osv.dev/vulnerability/GHSA-8wj3-cpmr-8whp"}],"summary":"Cockpit Content Platform vulnerable to 2FA bypass"}