← All advisories

Critical severity9.8NVD Advisory· Published Dec 30, 2020· Updated Jun 17, 2026

CVE-2020-35847

CVE-2020-35847

Description

Agentejo Cockpit before 0.11.2 allows NoSQL injection via the Controller/Auth.php resetpassword function.

AI Insight

LLM-synthesized narrative grounded in this CVE's description and references.

Affected products

2

Agentejo/Cockpit2 versions
cpe:2.3:a:agentejo:cockpit:*:*:*:*:*:*:*:*+ 1 more
- cpe:2.3:a:agentejo:cockpit:*:*:*:*:*:*:*:*range: <0.11.2
- (no CPE)range: <0.11.2

Patches

Vulnerability mechanics

References

6

github.com/agentejo/cockpit/commit/2a385af8d80ed60d40d386ed813c1039db00c466nvdPatchVendor Advisory
github.com/agentejo/cockpit/commit/33e7199575631ba1f74cba6b16b10c820bec59afnvdPatchVendor Advisory
github.com/agentejo/cockpit/commit/79fc9631ffa29146e3124ceaf99879b92e1ef24bnvdPatchVendor Advisory
packetstormsecurity.com/files/162282/Cockpit-CMS-0.11.1-NoSQL-Injection-Remote-Command-Execution.htmlnvdExploitThird Party AdvisoryVDB Entry
packetstormsecurity.com/files/163762/Cockpit-CMS-0.11.1-NoSQL-Injection.htmlnvdExploitThird Party AdvisoryVDB Entry
getcockpit.comnvdProductVendor Advisory

News mentions

0

No linked articles in our index yet.