What is GHSA-p8cq-pv6w-6rwx?

GHSA-p8cq-pv6w-6rwx is a security advisory published by GitHub Security Advisories with Medium severity. Cockpit Uses Platform-Dependent Third Party Components

Which CVE IDs does GHSA-p8cq-pv6w-6rwx cover?

GHSA-p8cq-pv6w-6rwx covers the following CVE IDs: CVE-2023-1160. Each CVE has its own detail page on EchelonGraph Pulse with the synthesized EG score.

What is the CVSS v3 score of GHSA-p8cq-pv6w-6rwx?

GHSA-p8cq-pv6w-6rwx has a CVSS v3 base score of 5.5, published by GitHub Security Advisories.

Which products are affected by GHSA-p8cq-pv6w-6rwx?

GHSA-p8cq-pv6w-6rwx affects 1 product, including: composer/cockpit-hq/cockpit:\u003c= 2.3.9.

GHSA-p8cq-pv6w-6rwxMediumCVSS 5.5

Cockpit Uses Platform-Dependent Third Party Components

Vendor

GitHub Security Advisories

Published

March 3, 2023

Last Modified

March 14, 2023

🔗 CVE IDs covered (1)

CVE-2023-1160 →

📋 Description

Use of Platform-Dependent Third Party Components in GitHub repository cockpit-hq/cockpit 2.3.9 and prior. A patch is available and anticipated to be part of version 2.4.0.

🎯 Affected products1

composer/cockpit-hq/cockpit:<= 2.3.9

🔗 References (4)

https://nvd.nist.gov/vuln/detail/CVE-2023-1160
https://github.com/cockpit-hq/cockpit/commit/690016208850f2d788ebc3c67884d4c692587eb8
https://huntr.dev/bounties/3ce480dc-1b1c-4230-9287-0dc3b31c2f87
https://github.com/advisories/GHSA-p8cq-pv6w-6rwx