CVE-2019-14397

cPanel before 80.0.5 allows demo accounts to modify arbitrary files via the extractfile API1 call (SEC-496)

published July 30, 2019

CVSS
—
EPSS
1%
Percentile
55.0
In the wild
Unconfirmed
What it is

cPanel before 80.0.5 allows demo accounts to modify arbitrary files via the extractfile API1 call (SEC-496).

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.00767 · 55.0th percentile
Published
2019-07-30T14:05Z
EPSS history
Timeline
  • 30 JUL 14:05Z
    cPanel before 80.0.5 allows demo accounts to modify arbitrary files via the extractfile API1 call (SEC-496)
    cvelistv5