Description
Softaculous Webuzo contains an authentication bypass vulnerability through the password reset functionality. Remote, anonymous attackers can exploit this vulnerability to gain full server access as the root user.
Affected products
| Vendor | Product | Affected | Fixed |
|---|---|---|---|
| Softaculous | Webuzo | 3.2.1 – ≤ 4.2.9 | — |
References
- https://blog.exodusintel.com/2024/07/25/softaculous-webuzo-authentication-bypass/ third-party-advisory