3 matches found
Code injection
cPanel before 70.0.23 allows arbitrary file-chmod operations during legacy incremental backups SEC-338...
3.6CVSS7AI score0.00336EPSS
SaveExploits0References1Affected Software1
CVE-2018-20909
CVE-2018-20909 affects cPanel prior to 70.0.23, where arbitrary file-chmod operations can occur during legacy incremental backups (SEC-338). Multiple sources (NVD, Red Hat advisory, CNVD) confirm the issue and link it to cPanel’s backup handling. The vulnerability arises in the backup process, en...
7.1CVSS7AI score0.00336EPSS
SaveExploits0References1Affected Software1
CVE-2018-20909: Incorrect Permission Assignment for Critical Resource
cPanel before 70.0.23 allows arbitrary file-chmod operations during legacy incremental backups SEC-338...
7.1CVSS5.9AI score0.00336EPSS
SaveExploits0References2
20