CVE-2023-35885

CloudPanel 2 before 2.3.1 has insecure file-manager cookie authentication...

CVE-2023-35885

creationtimestamp| type| source ---|---|--- 2023-07-21 10:59:01+00:00| published-proof-of-concept| https://t.me/CyberSecurityTechnologies/8707 2023-07-22 15:31:47+00:00| published-proof-of-concept| Telegram/72q6K-Gw2SSBLexfL7RRBs4aQAazbzl569yjTYRGLrjOQ 2023-07-23 03:58:34+00:00|...

CVE-2023-35885

CloudPanel 2 before 2.3.1 has insecure file-manager cookie authentication...

CVE-2023-35885

CloudPanel 2 before 2.3.1 has insecure file-manager cookie authentication...

CVE-2023-35885

CloudPanel 2 before 2.3.1 has insecure file-manager cookie authentication...

CVE-2023-35885

CloudPanel 2.x versions before 2.3.1 are vulnerable due to insecure file-manager cookie authentication, enabling remote code execution as root (CVSS 3.1: 9.8). Public disclosures and proof-of-concept tooling exist (Nuclei template for CVE-2023-35885; GitHub exploit). Affected product: CloudPanel;...

Exploit for Reliance on Cookies without Validation and Integrity Checking in Mgt-Commerce Cloudpanel

CVE-2023-35885 Cloudpanel 0-day Exploit Author: @EagleTube, @...