Description
In CWP (aka Control Web Panel or CentOS Web Panel) before 0.9.8.1107, attackers can make a crafted request to api/?api=add_server&DHCP= to add an authorized_keys text file in the /resources/ folder.
Critical · 9.8
CVE-2021-45466
EUVD-2021-32232GHSA-cmwh-95wf-h584
In CWP (aka Control Web Panel or CentOS Web Panel) before 0.9.8.1107, attackers can make a crafted request to api/?api=add_server&DHCP= to …
Published Dec 26, 2022 · Updated Apr 14, 2025 · Assigned by mitre