high7.3
CVE-2018-20914
In cPanel before 70.0.23, OpenID providers can inject arbitrary data into cPanel session files (SEC-368).
Impact
In cPanel before 70.0.23, OpenID providers can inject arbitrary data into cPanel session files (SEC-368).
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Cpanel | Cpanel | before 70.0.23 |