CVE-2018-9302

SSRF (Server Side Request Forgery) in /assets/lib/fuc.js.php in Cockpit 0.4.4 through 0.5.5 allows remote attackers to read arbitrary files or send TCP traffic to intranet hosts via the url parameter. NOTE: this vulnerability exists because of an incomplete fix for CVE-2017-14611, which was about version 0.13.0, which (surprisingly) is an earlier version than 0.4.4.

• CWE-918

• http://seclists.org/fulldisclosure/2018/May/10Exploit, Mailing List, Third Party Advisory
• https://www.exploit-db.com/exploits/44567/Exploit, Third Party Advisory, VDB Entry
• http://seclists.org/fulldisclosure/2018/May/10Exploit, Mailing List, Third Party Advisory
• https://www.exploit-db.com/exploits/44567/Exploit, Third Party Advisory, VDB Entry

Published

May 2, 2018

Last Modified

Jun 17, 2026

Status

Modified

• One Click Account Takeover in GranolaHow a notification link broke out of Electron and led to a one-click account takeover.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2018-9280An issue was discovered on Eaton UPS 9PX 8000 SP devices. Th…
• CVE-2018-9281An issue was discovered on Eaton UPS 9PX 8000 SP devices. Th…
• CVE-2018-9282An XSS issue was discovered in Subsonic Media Server 6.1.1. …
• CVE-2018-9283An XSS issue was discovered in CremeCRM 1.6.12. It is affect…
• CVE-2018-9284authentication.cgi on D-Link DIR-868L devices with Singapore…9.8
• CVE-2018-9285Main_Analysis_Content.asp in /apply.cgi on ASUS RT-AC66U, RT…
• CVE-2018-9303In Exiv2 0.26, an assertion failure in BigTiffImage::readDat…
• CVE-2018-9304In Exiv2 0.26, a divide by zero in BigTiffImage::printIFD in…
• CVE-2018-9305In Exiv2 0.26, an out-of-bounds read in IptcData::printStruc…
• CVE-2018-9306Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultI…
• CVE-2018-9307dsmall v20180320 allows XSS via the pdr_sn parameter to publ…
• CVE-2018-9309An issue was discovered in zzcms 8.2. It allows SQL injectio…9.8