CVE-2024-54679

CVE-2024-54679 CVE-2024-54679 - CyberPanel aka Cyber Panel 서비스 거부 설명 Cyber Panel에서 서비스 거부DoS 취약점이 발견되었습니다. 인증된 모든 사용자가 /dataBases/restartMySQL 엔드포인트에 요청을 보내 데이터베이스를 재시작할 수 있습니다. 이 취약점은 Cyberpanel/databases/views.py 파일의 400번째 줄에 있는 restartMySQL 함수에서 발생하며, 사용자 권한ACL을 확인하기 전에 작업이 실행됩니다. 함수는 먼저 세션에서...

EUVD-2024-52650

Malicious code in bioql PyPI...

CVE-2024-54679

CyberPanel aka Cyber Panel before 6778ad1 does not require the FilemanagerAdmin capability for restartMySQL actions...

CVE-2024-54679

CyberPanel (aka Cyber Panel) before the fix commit 6778ad1 does not require the FilemanagerAdmin capability for restartMySQL actions. The vulnerability arises because the restartMySQL operation is executed prior to ACL checks, allowing any authenticated user (low-privilege) to trigger a database ...

CyberPanel 安全漏洞

CyberPanel is a web hosting control panel with built-in DNS and email servers by Usman Nasir Personal Developer. A security vulnerability exists in CyberPanel aka Cyber Panel versions prior to 6778ad1, which stems from a restartMySQL operation that does not require the FilemanagerAdmin function...

CVE-2024-54679

CyberPanel aka Cyber Panel before 6778ad1 does not require the FilemanagerAdmin capability for restartMySQL actions...