NetSight
medium4.3

CVE-2018-20907

cPanel before 71.9980.37 does not enforce the Mime::list_hotlinks API feature restriction (SEC-432).

Impact

cPanel before 71.9980.37 does not enforce the Mime::list_hotlinks API feature restriction (SEC-432).

Affected products

VendorProductAffected versions
CpanelCpanel
from 61.9999.55 before 62.0.47
from 67.9999.64 before 68.0.39
from 69.9999.122 before 70.0.43
from 71.9980.30 before 71.9980.37

Weakness classification

References