cPanel before 68.0.27 allows a user to discover contents of directories (that are not owned by that user) by leveraging backups (SEC-339).

Published Aug 1, 2019 · Updated Aug 5, 2024 · Assigned by mitre