cPanel before 86.0.14 allows attackers to obtain access to the current working directory via the account backup feature (SEC-540).

Published May 11, 2020 · Updated Aug 4, 2024 · Assigned by mitre