cPanel before 60.0.25 allows arbitrary file-chown operations via reassign_post_terminate_cruft (SEC-173).

Published Aug 5, 2019 · Updated Aug 6, 2024 · Assigned by mitre