Code injection

2019-07-3015:15:00

PRIOn knowledge base

www.prio-n.com

5.5 Medium

AI Score

Confidence

High

0.0004 Low

EPSS

Percentile

12.8%

cPanel before 80.0.5 allows unsafe file operations in the context of the root account via the fetch_ssl_certificates_for_fqdns API (SEC-489).

CPENameOperatorVersion
cpanellt80.0.5

CPE	Name	Operator	Version
	cpanel	lt	80.0.5

References

documentation.cpanel.net/display/CL/80+Change+Log