Critical severity · published Apr 10, 2018
CVE-2017-14611
SSRF (Server Side Request Forgery) in Cockpit 0.13.0 allows remote attackers to read arbitrary files or send TCP traffic to intranet hosts via the url parameter, related to use of…
9.1
CVSS
1.9%
EPSS
No
On KEV
Description
SSRF (Server Side Request Forgery) in Cockpit 0.13.0 allows remote attackers to read arbitrary files or send TCP traffic to intranet hosts via the url parameter, related to use of the discontinued aheinze/fetch_url_contents component.
CVSS vector
CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:N
Attack vector
Network
Complexity
Low
Privileges
None
User interaction
None
Confidentiality
High
Integrity
High
Availability
None
Scope
Unchanged
Exploitation
Is it being used?
Exploit prediction (EPSS)1.9% · higher than 80% of CVEs
Exploited in the wildNo evidence yet
CISA KEVNot listed
Ransomware campaign useNot known
Affected products
Which versions
CO
Cockpit · Agentejo
0.13.0 · source: NVD
References
NVD
https://nvd.nist.gov/vuln/detail/CVE-2017-14611
CVE.org
https://www.cve.org/CVERecord?id=CVE-2017-14611
Exploit
http://seclists.org/fulldisclosure/2018/Apr/15
More from Cockpit
9.8
CVE-2024-4825
Unrestricted Upload of File with Dangerous Type vulnerability on Cockpit CMS from Agentejo
9.8
CVE-2022-2713
Insufficient Session Expiration in cockpit-hq/cockpit
9.8
CVE-2020-35131
Cockpit before 0.6.1 allows an attacker to inject custom PHP code and achieve Remote Command Execution via registerCriteriaFunction in lib/MongoLite/Database.php, as demonstrated…
9.8
CVE-2020-35848
Agentejo Cockpit before 0.11.2 allows NoSQL injection via the Controller/Auth.php newpassword function
9.8
CVE-2020-35847
Agentejo Cockpit before 0.11.2 allows NoSQL injection via the Controller/Auth.php resetpassword function