cPanel before 71.9980.37 allows arbitrary file-read operations during pkgacct custom template handling (SEC-435).

Published Aug 1, 2019 · Updated Aug 5, 2024 · Assigned by mitre