CVE-2017-18438: XEE
Published Aug 2, 2019
·Updated
cPanel before 64.0.21 allows demo accounts to execute code via Encoding API calls (SEC-242).
Affected Software
5 affected components
Cpanel Cpanel>=55.9999.61<56.0.49
Cpanel Cpanel>=57.9999.48<58.0.49
Cpanel Cpanel>=59.9999.58<60.0.43
Cpanel Cpanel>=61.9999.55<62.0.24
Cpanel Cpanel>=63.9999.74<64.0.21
Event History
Aug 2, 2019
CVE Published
via MITRE·04:14 PM
Data Sourced
via MITRE·04:14 PM
Description
Frequently Asked Questions
1
What is the severity of CVE-2017-18438?
CVE-2017-18438 is classified as a high severity vulnerability due to its potential impact on the security of demo accounts.
2
How do I fix CVE-2017-18438?
To address CVE-2017-18438, you should update cPanel to version 64.0.21 or later.
3
Who is affected by CVE-2017-18438?
CVE-2017-18438 affects cPanel versions earlier than 64.0.21, specifically those released from version 55.9999.61 through 64.0.20.
4
What does CVE-2017-18438 exploit?
CVE-2017-18438 exploits vulnerabilities in the Encoding API that allows demo accounts to execute arbitrary code.
5
When was CVE-2017-18438 disclosed?
CVE-2017-18438 was disclosed as part of cPanel's security reports in late 2017.