5.6 Medium
AI Score
Confidence
High
0.001 Low
EPSS
Percentile
49.8%
Hestia Control Panel 1.3.5 and below, in a shared-hosting environment, sometimes allows remote authenticated users to create a subdomain for a different customerβs domain name, leading to spoofing of services or email messages.
github.com/hestiacp/hestiacp/issues/1622
github.com/sickcodes/security/blob/master/advisories/sick-2021-006.md
sick.codes/sick-2021-006
www.hestiacp.com/