← All advisories

Unrated severityNVD Advisory· Published Aug 1, 2019· Updated Aug 5, 2024

CVE-2018-20938

CVE-2018-20938

Description

cPanel before 68.0.27 does not enforce ownership during addpkgext and delpkgext WHM API calls (SEC-324).

AI Insight

LLM-synthesized narrative grounded in this CVE's description and references.

Affected products

2

cPanel/cPaneldescription
CPanel/Cpanelllm-fuzzy
Range: <68.0.27

Patches

Vulnerability mechanics

References

1

documentation.cpanel.net/display/CL/68+Change+Logmitrex_refsource_CONFIRM

News mentions

0

No linked articles in our index yet.