CVE-2017-14611

Name of the Vulnerable Software and Affected Versions: Cockpit version 0.13.0

Description: The issue allows remote attackers to read arbitrary files or send TCP traffic to intranet hosts. This is related to the use of the discontinued aheinze/fetch url contents component, specifically via the url parameter.

Recommendations: For Cockpit version 0.13.0, consider restricting access to the affected component until a patch is available. Avoid using the url parameter in the affected API endpoint until the issue is resolved.