Description

CyberPanel contains an authentication bypass vulnerability that could allow an unauthenticated attacker to access restricted functionality and exploit RCE vulnerabilities to compromise the system.

Remediation

Upgrade to the latest version of CyberPanel.

References

What Are My OPTIONS? CyberPanel v2.3.6 pre-auth RCE

Details and fix of recent security issue and patch of CyberPanel

Related Vulnerabilities

XWiki Improper Handling of Exceptional Conditions Vulnerability (CVE-2023-26479)

MySQL CVE-2022-21323 Vulnerability (CVE-2022-21323)

Oracle Application Server Other Vulnerability (CVE-2007-3862)

WordPress Ultimate Member Plugin URL Redirection to Untrusted Site ('Open Redirect') Vulnerability (CVE-2022-1209)

phpMyFAQ Cross-Site Request Forgery (CSRF) Vulnerability (CVE-2017-15733)

Severity

Critical

Classification

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:H/VI:H/VA:H/SC:H/SI:H/SA:H

Tags

Known Vulnerabilities Code Execution Authentication Bypass CWE-306 CVE-2024-51567 CVE-2024-51568 CVE-2024-51378