CVE-2025-1025

HIGH NUCLEI

cockpit-hq/cockpit < 2.4.1 - Arbitrary File Upload via Extension Filter Bypass

Title source: llm
STIX 2.1

Exploitation Summary

CVE-2025-1025 has a Nuclei detection template available — see the Nuclei card below for the Shodan/FOFA recon queries.

Description

Versions of the package cockpit-hq/cockpit before 2.4.1 are vulnerable to Arbitrary File Upload where an attacker can use different extension to bypass the upload filter.

Nuclei Templates (1)

Cockpit < 2.4.1 - Arbitrary File Upload
HIGHVERIFIEDby iamnoooob,rootxharsh,pdresearch
Shodan: title:"Cockpit"

References (4)

Core 4

Scores

CVSS v3 7.5
EPSS 0.1755
EPSS Percentile 96.7%
Attack Vector NETWORK
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N

CISA SSVC

Vulnrichment
Exploitation poc
Automatable yes
Technical Impact partial

Details

CWE
CWE-434
Status published
Products (2)
cockpit-hq/cockpit 0 - 2.4.1Packagist
n/a/cockpit-hq/cockpit < 2.4.1
Published Feb 05, 2025
Tracked Since Feb 18, 2026