PT-2025-33680
CVE-2025-55300
·
Publicado
2025-08-12
·
Atualizado
2025-08-21
Descrição por
CVSS 4.0
8.6
AltaMétricasAV:N/AC:L/AT:N/PR:N/UI:A/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N
Name of the Vulnerable Software and Affected Versions:
Komari versions prior to 1.0.4-fix1
Description:
Komari is a server monitoring tool. A Cross-Site WebSocket Hijacking (CSWSH) issue exists in the WebSocket upgrader due to disabled origin checking, potentially allowing remote code execution against authenticated users. An attacker can send requests to the terminal websocket endpoint with the victim's browser cookies.
Recommendations:
Update to version 1.0.4-fix1 or later.
Explorabilidade
Exploit
Correção
Impactos
Fornecedores
Produtos afetados
Encontrou algum problema na descrição? Tem algo a acrescentar? Fique à vontade para nos escrever 👾