CVE-2020-35850

An SSRF issue was discovered in cockpit-project.org Cockpit 234. NOTE: this is unrelated to the Agentejo Cockpit product. NOTE: the vendor states "I don't think [it] is a big real-life issue.

CVSS v3.1

6.5 MEDIUMCVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H

CVSS v2.0

4.0 MEDIUMAV:N/AC:L/Au:S/C:N/I:N/A:P

EPSS

1.64% chance of exploitation in the next 30 days, 75th percentile

Published

2020-12-30

Updated

2024-08-04

Proof-of-concept exploits (2)

• cockpit-project/cockpit/issues/15077
• passtheticket/vulnerability-research/blob/main/cockpitProject/README.md

References

• CVE Record
• NVD entry

Related

• CVE-2022-28987
• CVE-2023-31492
• CVE-2023-48003
• CVE-2024-24409
• CVE-2024-38200
• CVE-2025-9435