NetSight
high8.1

CVE-2020-12785

cPanel before 86.0.14 allows attackers to obtain access to the current working directory via the account backup feature (SEC-540).

Impact

cPanel before 86.0.14 allows attackers to obtain access to the current working directory via the account backup feature (SEC-540).

Affected products

VendorProductAffected versions
CpanelCpanel
from 11.78.0.1 before 11.78.0.47
from 11.84.0.0 before 11.84.0.22
from 11.86.0.1 before 11.86.0.14

References