Description

CyberPanel contains an authentication bypass vulnerability that could allow an unauthenticated attacker to access restricted functionality and exploit RCE vulnerabilities to compromise the system.

Remediation

Upgrade to the latest version of CyberPanel.

References

What Are My OPTIONS? CyberPanel v2.3.6 pre-auth RCE

Details and fix of recent security issue and patch of CyberPanel

Related Vulnerabilities

Apache Tomcat Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Vulnerability (CVE-2007-3386)

Serendipity Remote Code Execution (CVE-2020-10964)

MySQL CVE-2019-3003 Vulnerability (CVE-2019-3003)

MySQL CVE-2021-2299 Vulnerability (CVE-2021-2299)

MediaWiki Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Vulnerability (CVE-2021-42045)

Severity

Critical

Classification

CVE-2024-51567 CVE-2024-51568 CVE-2024-51378 CWE-306 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:H/VI:H/VA:H/SC:H/SI:H/SA:H

Tags

Known Vulnerabilities Code Execution Authentication Bypass