Critical · published October 30, 2024
CVSS calls it critical at 10.0. It is confirmed in active exploitation. It sits in the 99.9th percentile for exploit probability.
🚨 A sneaky exploit lets attackers bypass authentication and execute any command they want via CyberPanel's DNS and FTP endpoints. 🔥 Think of it like a restaurant where the waiter accidentally leaves the back door open, allowing anyone to stroll in and start rearranging the kitchen or messing with orders without anyone noticing. That's exactly what happens here when the secMiddleware checks fail to kick in for specific requests! An attacker could execute arbitrary commands on your server, leading to an absolute disaster like data breaches, system manipulation, or even complete control over your environment. With real-world exploits already reported, this vulnerability is a ticking time bomb for any affected systems!
Think of it like a restaurant where the waiter accidentally leaves the back door open, allowing anyone to stroll in and start rearranging the kitchen or messing with orders without anyone noticing. That's exactly what happens here when the secMiddleware checks fail to kick in for specific requests! The flaw exists in CyberPanel before version 2.3.7, where the 'getresetstatus' function in the DNS and FTP views allows remote attackers to use shell metacharacters to bypass authentication checks, specifically for GET requests. This flaw enables executing arbitrary commands without proper access control.
An attacker could execute arbitrary commands on your server, leading to an absolute disaster like data breaches, system manipulation, or even complete control over your environment. With real-world exploits already reported, this vulnerability is a ticking time bomb for any affected systems! To protect your systems, immediately patch to version 2.3.8 or later. Review your configuration and ensure that secMiddleware effectively validates all incoming requests, regardless of the method. Implement additional security measures to monitor and log requests for suspicious activity. You've got this! Fixing this vulnerability will bolster your security and keep your systems safe from potential chaos. 🛡️
| Product | Versions | Fixed in |
|---|---|---|
| cyberpanel/cyberpanel | < 2.3.8 | 2.3.8 |