CVE-2017-18437

cPanel before 64.0.21 allows a Webmail account to execute code via forwarders SEC-240...

CVE-2017-18437

CVE-2017-18437 affects cPanel prior to 64.0.21, where a Webmail account can execute code via forwarders (SEC-240). Impact is code execution with Webmail privileges; CVSS data shows LOW to MEDIUM base scores (C/L/I/P). Remediation: upgrade to 64.0.21 or newer to fix the vulnerability. Other detail...