cvedb.io
CVE-2018-15540
CRITICAL · CVSS 9.8
EPSS exploitation probability: 0%
Published 2018-10-15T19:29:00.930 · Last modified 2026-06-17T01:42:43.660

Summary

Agentejo Cockpit performs actions on files without appropriate validation and therefore allows an attacker to traverse the file system to unintended locations and/or access arbitrary files, aka /media/api Directory Traversal.

Affected products

agentejo — cockpit

Does this affect you?

Add your gear to cvedb and we'll alert you only when agentejo ships something exploited.

Check my exposure →

References

This product uses data from the NVD API but is not endorsed or certified by the NVD. Informational only; not professional security advice.