NetSight
medium5.5

CVE-2018-20908

cPanel before 71.9980.37 allows arbitrary file-read operations during pkgacct custom template handling (SEC-435).

Impact

cPanel before 71.9980.37 allows arbitrary file-read operations during pkgacct custom template handling (SEC-435).

Affected products

VendorProductAffected versions
CpanelCpanel
from 61.9999.55 before 62.0.47
from 67.9999.64 before 68.0.39
from 69.9999.122 before 70.0.43

Weakness classification

References