← All advisories

High severity7.2NVD Advisory· Published Aug 11, 2021· Updated Jun 17, 2026

CVE-2021-38584

CVE-2021-38584

Description

The WHM Locale Upload feature in cPanel before 98.0.1 allows XXE attacks (SEC-585).

Affected products

3

CPanel/Cpanel
cpe:2.3:a:cpanel:cpanel:*:*:*:*:*:*:*:*
Range: <98.0.1
cPanel/cPaneldescription
CPanel/WHM Locale Uploadllm-fuzzy
Range: <98.0.1

Patches

Vulnerability mechanics

References

1

docs.cpanel.net/changelogs/98-change-log/nvdRelease NotesVendor Advisory

News mentions

0

No linked articles in our index yet.