CVE Catalog
CVE-2023-35885
CriticalCVSS 9.8Exploitation Probability (EPSS)
Very high risk72.37%
99th percentile - higher than 99% of all known CVEs
Summary
CloudPanel 2 before version 2.3.1 has insecure cookie authentication in the file manager.
Risk Assessment
Insecure cookie authentication may lead to unauthorized access to files and user data, posing a significant security risk.
Recommendation
It is recommended to update CloudPanel to version 2.3.1 or later to mitigate this vulnerability.
Original NVD description (English source)
CloudPanel 2 before 2.3.1 has insecure file-manager cookie authentication.