Unrated severityNVD Advisory· Published Oct 29, 2024· Updated Oct 30, 2024

CVE-2024-51568

Description

CyberPanel (aka Cyber Panel) before 2.3.5 allows Command Injection via completePath in the ProcessUtilities.outputExecutioner() sink. There is /filemanager/upload (aka File Manager upload) unauthenticated remote code execution via shell metacharacters.

AI Insight

LLM-synthesized narrative grounded in this CVE's description and references.

Affected products

Cyberpanel/Cyberpanelcpe-rescue2 versions
(expand)+ 1 more
- (no CPE)
- (no CPE)range: <2.3.5

Patches

Vulnerability mechanics

References

cwe.mitre.org/data/definitions/78.htmlmitre
cyberpanel.net/KnowledgeBase/home/change-logs/mitre
cyberpanel.net/blog/cyberpanel-v2-3-5mitre
dreyand.rs/code/review/2024/10/27/what-are-my-options-cyberpanel-v236-pre-auth-rcemitre

News mentions

No linked articles in our index yet.

cvss	0.000
epss	0.037
exploit	0.030
kev	0.000
patch	0.000
ransomware	0.000