CVE-2017-18454: XSS
Published Aug 2, 2019
·Updated
cPanel before 62.0.24 allows stored XSS in the WHM cPAddons install interface (SEC-262).
Affected Software
4 affected components
Cpanel Cpanel>=55.9999.61<56.0.49
Cpanel Cpanel>=57.9999.48<58.0.49
Cpanel Cpanel>=59.9999.58<60.0.43
Cpanel Cpanel>=61.9999.55<62.0.24
Event History
Aug 2, 2019
CVE Published
via MITRE·04:28 PM
Data Sourced
via MITRE·04:28 PM
Description
Frequently Asked Questions
1
What is the severity of CVE-2017-18454?
CVE-2017-18454 is considered a critical vulnerability due to its potential for stored cross-site scripting (XSS) attacks in cPanel.
2
How do I fix CVE-2017-18454?
To fix CVE-2017-18454, upgrade to cPanel version 62.0.24 or later.
3
What versions of cPanel are affected by CVE-2017-18454?
CVE-2017-18454 affects cPanel versions prior to 62.0.24, including specific versions between 55.9999.61 and 62.0.24.
4
What potential impact does CVE-2017-18454 have?
The impact of CVE-2017-18454 includes the possibility for attackers to execute malicious scripts in the user's browser, potentially leading to session hijacking or sensitive data theft.
5
Is CVE-2017-18454 related to the WHM interface?
Yes, CVE-2017-18454 specifically allows stored XSS in the WHM cPAddons install interface.