cPanel before 84.0.20 allows a demo account to achieve remote code execution via a cpsrvd rsync shell (SEC-544).

Published Mar 17, 2020 · Updated Aug 4, 2024 · Assigned by mitre