Description
cPanel before 74.0.0 allows Apache HTTP Server configuration injection because of DocumentRoot variable interpolation (SEC-416).
Unscored
CVE-2018-20885
EUVD-2018-13423GHSA-8hcp-gqh3-6c9c
cPanel before 74.0.0 allows Apache HTTP Server configuration injection because of DocumentRoot variable interpolation (SEC-416).
Published Aug 1, 2019 · Updated Aug 5, 2024 · Assigned by mitre