CVE-2023-36630
HighCVSS 8.8Exploitation Probability (EPSS)
Low risk49th percentile - higher than 49% of all known CVEs
Summary
In CloudPanel before version 2.3.1, insecure file upload leads to privilege escalation and authentication bypass.
Risk Assessment
Organizations may be exposed to unauthorized access to systems and data, potentially leading to serious security breaches.
Recommendation
It is recommended to update CloudPanel to version 2.3.1 or later to mitigate this vulnerability.
Other vulnerabilities in CloudPanel
See all- CVE-2023-35885Critical
CloudPanel 2 before version 2.3.1 has insecure cookie authentication in the file manager.
- CVE-2024-44765Medium
A vulnerability in CloudPanel versions 2.0.0 through 2.4.2 allows low-privilege users to bypass access controls and gain unauthorized access to sensitive configuration files and administrative functionality.
- CVE-2023-33747High
CloudPanel version 2.2.2 allows attackers to execute a path traversal attack.
Original NVD description (English source)
In CloudPanel before 2.3.1, insecure file upload leads to privilege escalation and authentication bypass.