CVE-2024-4825: Agentejo Cockpit

Critical severity, CVSS 9.8. EPSS: 0.7% chance of exploitation in the next 30 days.

A vulnerability has been discovered in Agentejo Cockpit CMS v0.5.5 that consists in an arbitrary file upload in ‘/media/api’ parameter via post request. An attacker could upload files to the server, compromising the entire infrastructure.

Affected products

• Agentejo Cockpit: version 0.5.5 only

Published 2024-05-14. Last modified 2026-06-17.