CVE-2021-28379

web/upload/UploadHandler.php in Vesta Control Panel (aka VestaCP) through 0.9.8-27 and myVesta through 0.9.8-26-39 allows uploads from a different origin

published March 15, 2021

CVSS
—
EPSS
6%
Percentile
93.3
In the wild
Unconfirmed
What it is

web/upload/UploadHandler.php in Vesta Control Panel (aka VestaCP) through 0.9.8-27 and myVesta through 0.9.8-26-39 allows uploads from a different origin.

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.06033 · 93.3th percentile
Published
2021-03-15T05:56Z
EPSS history
Timeline
  • 15 MAR 05:56Z
    web/upload/UploadHandler.php in Vesta Control Panel (aka VestaCP) through 0.9.8-27 and myVesta through 0.9.8-26-39 allows uploads from a different origin
    cvelistv5