Cockpit CMS 0.4.4 < 0.5.5 - Server-Side Request Forgery
PoC files
1 fileFile viewing is interactive and short-lived. Downloads are password-protected ZIP archives using password eip.
File viewing is interactive and short-lived. Downloads are password-protected ZIP archives using password eip.