cPanel before 11.54.0.0 allows unauthorized password changes via Webmail API commands (SEC-65).

Published Aug 1, 2019 · Updated Aug 6, 2024 · Assigned by mitre