CVE-2018-20897: Input Validation
Published Aug 1, 2019
·Updated
cPanel before 71.9980.37 allows arbitrary file-unlink operations via the cPAddons moderation system (SEC-395).
Affected Software
4 affected components
Cpanel Cpanel>=61.9999.55<62.0.47
Cpanel Cpanel>=67.9999.64<68.0.39
Cpanel Cpanel>=69.9999.122<70.0.43
Cpanel Cpanel>=71.9980.30<71.9980.37
Event History
Aug 1, 2019
CVE Published
via MITRE·01:53 PM
Data Sourced
via MITRE·01:53 PM
Description
Frequently Asked Questions
1
What is the severity of CVE-2018-20897?
CVE-2018-20897 has been classified as a medium severity vulnerability.
2
How do I fix CVE-2018-20897?
To fix CVE-2018-20897, upgrade cPanel to version 71.9980.37 or later.
3
What systems are affected by CVE-2018-20897?
CVE-2018-20897 affects cPanel versions prior to 71.9980.37, along with several specific version ranges of earlier releases.
4
What type of vulnerability is CVE-2018-20897?
CVE-2018-20897 is an arbitrary file-unlink vulnerability.
5
Can CVE-2018-20897 be exploited remotely?
Yes, CVE-2018-20897 can be exploited remotely through the cPAddons moderation system.