CVE-2017-18452: Input Validation
Published Aug 2, 2019
·Updated
cPanel before 64.0.21 allows code execution via Rails configuration files (SEC-259).
Affected Software
5 affected components
Cpanel Cpanel>=55.9999.61<56.0.49
Cpanel Cpanel>=57.9999.48<58.0.49
Cpanel Cpanel>=59.9999.58<60.0.43
Cpanel Cpanel>=61.9999.55<62.0.24
Cpanel Cpanel>=63.9999.74<64.0.21
Event History
Aug 2, 2019
CVE Published
via MITRE·04:26 PM
Data Sourced
via MITRE·04:26 PM
Description
Frequently Asked Questions
1
What is the severity of CVE-2017-18452?
CVE-2017-18452 has a high severity due to its potential for code execution in vulnerable cPanel versions.
2
How do I fix CVE-2017-18452?
To fix CVE-2017-18452, upgrade to cPanel version 64.0.21 or later.
3
Which versions of cPanel are affected by CVE-2017-18452?
cPanel versions prior to 64.0.21, including 55.x.x, 56.x.x, 57.x.x, 58.x.x, 59.x.x, 60.x.x, 61.x.x, and 62.x.x, are affected by CVE-2017-18452.
4
What kind of vulnerability is CVE-2017-18452?
CVE-2017-18452 is a code execution vulnerability that allows unauthorized code execution via Rails configuration files.
5
Is CVE-2017-18452 related to cPanel configuration files?
Yes, CVE-2017-18452 specifically exploits vulnerabilities in Rails configuration files used by cPanel.