NetSight
medium4.3

CVE-2018-20906

cPanel before 71.9980.37 allows attackers to make API calls that bypass the images feature restriction (SEC-430).

Impact

cPanel before 71.9980.37 allows attackers to make API calls that bypass the images feature restriction (SEC-430).

Affected products

VendorProductAffected versions
CpanelCpanel
from 61.9999.55 before 62.0.47
from 67.9999.64 before 68.0.39
from 69.9999.122 before 70.0.43

Weakness classification

References