medium5.3
CVE-2019-14397
cPanel before 80.0.5 allows demo accounts to modify arbitrary files via the extractfile API1 call (SEC-496).
Impact
cPanel before 80.0.5 allows demo accounts to modify arbitrary files via the extractfile API1 call (SEC-496).
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Cpanel | Cpanel | before 80.0.5 |