Command injection

2019-08-0115:15:00

PRIOn knowledge base

www.prio-n.com

7.2 High

AI Score

Confidence

High

0.001 Low

EPSS

Percentile

28.6%

In cPanel before 70.0.23, OpenID providers can inject arbitrary data into cPanel session files (SEC-368).

CPENameOperatorVersion
cpanellt70.0.23

CPE	Name	Operator	Version
	cpanel	lt	70.0.23

References

documentation.cpanel.net/display/CL/70+Change+Log