openITCOCKPIT Cross-Site Scripting Vulnerability

A cross-site scripting (XSS) vulnerability exists in openITCOCKPIT versions prior to 3.7.3. The issue arises from unnecessary files, including Lodash files, being accessible in the web root directory. These files can be exploited to inject malicious scripts, leading to XSS attacks.

Impact

Exploitation of this vulnerability allows for cross-site scripting, where an attacker can inject malicious scripts that are executed in the context of the user's browser.

Remediation

Users can update to openITCOCKPIT version 3.7.3 to address this vulnerability. Instructions for updating are available on the openITCOCKPIT website.