cPanel before 60.0.25 allows format-string injection in exception-message handling (SEC-171).

Published Aug 5, 2019 · Updated Aug 6, 2024 · Assigned by mitre