critical9.8
CVE-2024-24621
Softaculous Webuzo contains an authentication bypass vulnerability through the password reset functionality.
Impact
Softaculous Webuzo contains an authentication bypass vulnerability through the password reset functionality. Remote, anonymous attackers can exploit this vulnerability to gain full server access as the root user.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Softaculous | Webuzo | before 4.2.9 |