CVE-2017-11441: XSS

Q: What is the severity of CVE-2017-11441?

CVE-2017-11441 is classified as a medium-severity vulnerability due to its potential for XSS attacks.

Q: How do I fix CVE-2017-11441?

To fix CVE-2017-11441, upgrade cPanel and WHM to versions 56.0.51, 58.0.52, 60.0.45, 62.0.27, 64.0.33, or 66.0.2 or later.

Q: What type of vulnerability is CVE-2017-11441?

CVE-2017-11441 is a cross-site scripting (XSS) vulnerability.

Q: Which cPanel versions are affected by CVE-2017-11441?

CVE-2017-11441 affects cPanel and WHM versions before 56.0.51, 58.x before 58.0.52, 60.x before 60.0.45, 62.x before 62.0.27, 64.x before 64.0.33, and 66.x before 66.0.2.

Q: Could CVE-2017-11441 lead to data exposure?

Yes, CVE-2017-11441 could potentially allow an attacker to steal sensitive information through cross-site scripting.

Published Jul 19, 2017

Updated

The WHM Upload Locale interface in cPanel before 56.0.51, 58.x before 58.0.52, 60.x before 60.0.45, 62.x before 62.0.27, 64.x before 64.0.33, and 66.x before 66.0.2 has XSS via a locale filename, aka SEC-297.

Affected Software

114 affected components

Cpanel WHM<=56.0.50

Cpanel WHM=58.0.3

Cpanel WHM=58.0.4

Cpanel WHM=58.0.5

Cpanel WHM=58.0.6

Cpanel WHM=58.0.7

Cpanel WHM=58.0.8

Cpanel WHM=58.0.11

Cpanel WHM=58.0.12

Cpanel WHM=58.0.13

Cpanel WHM=58.0.17

Cpanel WHM=58.0.19

Cpanel WHM=58.0.20

Cpanel WHM=58.0.23

Cpanel WHM=58.0.24

Cpanel WHM=58.0.25

Cpanel WHM=58.0.26

Cpanel WHM=58.0.27

Cpanel WHM=58.0.28

Cpanel WHM=58.0.29

Cpanel WHM=58.0.30

Cpanel WHM=58.0.31

Cpanel WHM=58.0.32

Cpanel WHM=58.0.34

Cpanel WHM=58.0.36

Cpanel WHM=58.0.37

Cpanel WHM=58.0.41

Cpanel WHM=58.0.43

Cpanel WHM=58.0.44

Cpanel WHM=58.0.45

Cpanel WHM=58.0.46

Cpanel WHM=58.0.47

Cpanel WHM=58.0.48

Cpanel WHM=58.0.49

Cpanel WHM=58.0.50

Cpanel WHM=58.0.51

Cpanel WHM=60.0.3

Cpanel WHM=60.0.4

Cpanel WHM=60.0.5

Cpanel WHM=60.0.6

Cpanel WHM=60.0.8

Cpanel WHM=60.0.9

Cpanel WHM=60.0.10

Cpanel WHM=60.0.11

Cpanel WHM=60.0.12

Cpanel WHM=60.0.13

Cpanel WHM=60.0.14

Cpanel WHM=60.0.15

Cpanel WHM=60.0.17

Cpanel WHM=60.0.18

Cpanel WHM=60.0.19

Cpanel WHM=60.0.22

Cpanel WHM=60.0.24

Cpanel WHM=60.0.25

Cpanel WHM=60.0.26

Cpanel WHM=60.0.27

Cpanel WHM=60.0.28

Cpanel WHM=60.0.31

Cpanel WHM=60.0.32

Cpanel WHM=60.0.34

Cpanel WHM=60.0.35

Cpanel WHM=60.0.36

Cpanel WHM=60.0.37

Cpanel WHM=60.0.38

Cpanel WHM=60.0.39

Cpanel WHM=60.0.42

Cpanel WHM=60.0.43

Cpanel WHM=60.0.44

Cpanel WHM=62.0.1

Cpanel WHM=62.0.2

Cpanel WHM=62.0.4

Cpanel WHM=62.0.5

Cpanel WHM=62.0.6

Cpanel WHM=62.0.7

Cpanel WHM=62.0.8

Cpanel WHM=62.0.9

Cpanel WHM=62.0.10

Cpanel WHM=62.0.11

Cpanel WHM=62.0.12

Cpanel WHM=62.0.14

Cpanel WHM=62.0.15

Cpanel WHM=62.0.16

Cpanel WHM=62.0.17

Cpanel WHM=62.0.19

Cpanel WHM=62.0.20

Cpanel WHM=62.0.23

Cpanel WHM=62.0.24

Cpanel WHM=62.0.26

Cpanel WHM=64.0.0

Cpanel WHM=64.0.1

Cpanel WHM=64.0.2

Cpanel WHM=64.0.3

Cpanel WHM=64.0.4

Cpanel WHM=64.0.7

Cpanel WHM=64.0.9

Cpanel WHM=64.0.11

Cpanel WHM=64.0.12

Cpanel WHM=64.0.13

Cpanel WHM=64.0.14

Cpanel WHM=64.0.15

Cpanel WHM=64.0.17

Cpanel WHM=64.0.18

Cpanel WHM=64.0.19

Cpanel WHM=64.0.20

Cpanel WHM=64.0.21

Cpanel WHM=64.0.22

Cpanel WHM=64.0.24

Cpanel WHM=64.0.27

Cpanel WHM=64.0.28

Cpanel WHM=64.0.29

Cpanel WHM=64.0.30

Cpanel WHM=64.0.31

Cpanel WHM=64.0.32

Cpanel WHM=66.0.1

Event History

Jul 19, 2017

CVE Published

via MITRE·07:00 AM

Data Sourced

via MITRE·07:00 AM

Description

Frequently Asked Questions

What is the severity of CVE-2017-11441?

CVE-2017-11441 is classified as a medium-severity vulnerability due to its potential for XSS attacks.

How do I fix CVE-2017-11441?

To fix CVE-2017-11441, upgrade cPanel and WHM to versions 56.0.51, 58.0.52, 60.0.45, 62.0.27, 64.0.33, or 66.0.2 or later.

What type of vulnerability is CVE-2017-11441?