CVE-2024-4825 Unrestricted Upload of File with Dangerous Type vulnerability on Cockpit CMS from Agentejo
Attackers can upload malicious files to the server via the media API, potentially compromising the entire infrastructure.
- Exploited in the wild
- Not known
- Login needed
- Not needed
- Attackable
- Over the internet
- Victim action needed
- Not needed
- Fix
- Available
What is CVE-2024-4825?
CVE-2024-4825 is a critical vulnerability in Agentejo Cockpit CMS, published on 13 May 2024. An attacker can exploit it over the internet without logging in, with no action from the victim.
Official description
A vulnerability has been discovered in Agentejo Cockpit CMS v0.5.5 that consists in an arbitrary file upload in ‘/media/api’ parameter via post request. An attacker could upload files to the server, compromising the entire infrastructure.
Weakness: CWE-434
Which versions are affected by CVE-2024-4825?
2 open source packages ship an affected version, including cockpit-hq/cockpit. It affects 1 product.
| Package | Affected | Fixed in |
|---|---|---|
cockpit-hq/cockpit Packagist | All versions | 2.7.0 |
cockpit-hq/cockpit Packagist | All versions | 2.7.0 |
Products include Agentejo Cockpit.
How do I fix CVE-2024-4825?
Upgrade cockpit-hq/cockpit to 2.7.0 or later.
Is CVE-2024-4825 being exploited?
There is no known exploitation of CVE-2024-4825 in the wild and no public exploit code.
Other vulnerabilities in Agentejo Cockpit CMS
Sources
Also known as GHSA-vpj8-xfqc-jcv9.