cPanel before 59.9999.145 allows arbitrary file-read operations because of a multipart form processing error (SEC-154).
Published August 6, 2019.
Cpanel Cpanel