CloudPanel vulnerabilities

CloudPanel 2 before version 2.3.1 has insecure cookie authentication in the file manager.

A vulnerability in CloudPanel versions 2.0.0 through 2.4.2 allows low-privilege users to bypass access controls and gain unauthorized access to sensitive configuration files and administrative functionality.

In CloudPanel before version 2.3.1, insecure file upload leads to privilege escalation and authentication bypass.

CloudPanel version 2.2.2 allows attackers to execute a path traversal attack.