CVE-2018-20927

cPanel before 70.0.23 allows jailshell escape because of incorrect crontab parsing SEC-382...

CVE-2018-20927

CVE-2018-20927 (cPanel) affects cPanel prior to 70.0.23, where jailshell escape is possible due to incorrect crontab parsing (SEC-382). Exploitation is described as local (attack vector LOCAL) with LOW severity in CVSSv3 (3.8) and LOW in CVSSv2 (2.1). The root cause is mis-parsing of crontab entr...