Vendor
Cloudpanel Io
Products
1
CVEs
4
Across products
4
Status
Private
Products
1- 4 CVEs
Recent CVEs
4| CVE | Vendor / Product | Sev | Risk | CVSS | EPSS | KEV | Published | Description |
|---|---|---|---|---|---|---|---|---|
| CVE-2025-15241 | Low | 0.16 | 3.5 | 0.00 | Dec 30, 2025 | A security vulnerability has been detected in CloudPanel Community Edition up to 2.5.1. The affected element is an unknown function of the file /admin/users of the component HTTP Header Handler. Such manipulation of the argument Referer leads to open redirect. It is possible to… | ||
| CVE-2023-35885 | 0.08 | — | 0.75 | Jun 20, 2023 | CloudPanel 2 before 2.3.1 has insecure file-manager cookie authentication. | |||
| CVE-2023-36630 | 0.00 | — | 0.01 | Jun 25, 2023 | In CloudPanel before 2.3.1, insecure file upload leads to privilege escalation and authentication bypass. | |||
| CVE-2023-33747 | 0.00 | — | 0.00 | Jun 6, 2023 | CloudPanel v2.2.2 allows attackers to execute a path traversal. |
- risk 0.16cvss 3.5epss 0.00
A security vulnerability has been detected in CloudPanel Community Edition up to 2.5.1. The affected element is an unknown function of the file /admin/users of the component HTTP Header Handler. Such manipulation of the argument Referer leads to open redirect. It is possible to…
- CVE-2023-35885Jun 20, 2023risk 0.08cvss —epss 0.75
CloudPanel 2 before 2.3.1 has insecure file-manager cookie authentication.
- CVE-2023-36630Jun 25, 2023risk 0.00cvss —epss 0.01
In CloudPanel before 2.3.1, insecure file upload leads to privilege escalation and authentication bypass.
- CVE-2023-33747Jun 6, 2023risk 0.00cvss —epss 0.00
CloudPanel v2.2.2 allows attackers to execute a path traversal.