cPanel has released new builds for all public update tiers. These updates provide targeted changes to address security concerns with the cPanel & WHM product. These builds are currently available to all customers via the standard update system. cPanel has rated these updates as having CVSSv3 scores ranging from 3.3 …
cPanel Newsroom
TSR20200003
cPanel TSR-2020-0003 Full Disclosure
SEC-485 Summary Remote code execution via Exim filter path handling. Security Rating cPanel has assigned this vulnerability a CVSSv3 score of 9.9 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H Description The handling of file paths constructed from email recipient addresses in cPanel & WHM’s default Exim configuration did not adequately protect against path traversal attacks. In …
cPanel Newsroom