CVE-2023-33747
HighCVSS 7.8Exploitation Probability (EPSS)
Low risk37th percentile - higher than 37% of all known CVEs
Summary
CloudPanel version 2.2.2 allows attackers to execute a path traversal attack.
Risk Assessment
Attackers may gain access to system files, potentially leading to the exposure of sensitive data or system takeover.
Recommendation
It is recommended to update CloudPanel to the latest version to mitigate the risk associated with this vulnerability.
Other vulnerabilities in CloudPanel v2.2.2
See all- CVE-2023-35885Critical
CloudPanel 2 before version 2.3.1 has insecure cookie authentication in the file manager.
- CVE-2024-44765Medium
A vulnerability in CloudPanel versions 2.0.0 through 2.4.2 allows low-privilege users to bypass access controls and gain unauthorized access to sensitive configuration files and administrative functionality.
- CVE-2023-36630High
In CloudPanel before version 2.3.1, insecure file upload leads to privilege escalation and authentication bypass.
Original NVD description (English source)
CloudPanel v2.2.2 allows attackers to execute a path traversal.