CVE-2022-2713

CRITICAL 9.8EPSS 1.2%

Insufficient Session Expiration in GitHub repository cockpit-hq/cockpit prior to 2.2.0.

CVSS v3.1: 9.8 CRITICALCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
CVSS v3.1: 9.8 CRITICALCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
CVSS v3.0: 8.6 HIGHCVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:H/A:L
EPSS: 1.24% chance of exploitation in the next 30 days, 67th percentile
Published: 2022-08-08
Updated: 2026-03-27

Proof-of-concept exploits (1)

https://huntr.dev/bounties/3080fc96-75d7-4868-84de-9fc8c9b90290

References

Related