CVE-2018-20906: Incorrect Permission Assignment for Critical Resource

cPanel before 71.9980.37 allows attackers to make API calls that bypass the images feature restriction SEC-430...