CVE-2017-18408: XSS
Published Aug 2, 2019
·Updated
cPanel before 67.9999.103 allows stored XSS in WHM MySQL Password Change interfaces (SEC-282).
Affected Software
6 affected components
Cpanel Cpanel>=55.9999.61<56.0.52
Cpanel Cpanel>=59.9999.58<60.0.48
Cpanel Cpanel>=61.9999.55<62.0.30
Cpanel Cpanel>=63.9999.74<64.0.40
Cpanel Cpanel>=65.9999.38<66.0.23
Cpanel Cpanel>=67.9999.64<67.9999.103
Event History
Aug 2, 2019
CVE Published
via MITRE·01:47 PM
Data Sourced
via MITRE·01:47 PM
Description
Frequently Asked Questions
1
What is the severity of CVE-2017-18408?
CVE-2017-18408 is classified as a medium severity vulnerability due to its potential for stored XSS attacks.
2
How do I fix CVE-2017-18408?
To fix CVE-2017-18408, you should upgrade to cPanel version 68 or later.
3
What versions of cPanel are affected by CVE-2017-18408?
CVE-2017-18408 affects cPanel versions before 67.9999.103, including multiple prior versions.
4
What type of vulnerability is CVE-2017-18408?
CVE-2017-18408 is a stored cross-site scripting (XSS) vulnerability.
5
Where is the vulnerability CVE-2017-18408 located?
CVE-2017-18408 is found in the MySQL Password Change interfaces in WHM of cPanel.