medium5.3
CVE-2018-20885
cPanel before 74.0.0 allows Apache HTTP Server configuration injection because of DocumentRoot variable interpolation (SEC-416).
Impact
cPanel before 74.0.0 allows Apache HTTP Server configuration injection because of DocumentRoot variable interpolation (SEC-416).
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Cpanel | Cpanel | before 74.0.0 |