CVE-2019-13056: CSRF
An issue was discovered in CyberPanel through 1.8.4. On the user edit page, an attacker can edit the administrator's e-mail and password because of the lack of CSRF protection.
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2019-13056?
CVE-2019-13056 is considered a high-severity vulnerability due to its potential for unauthorized account modification.
How do I fix CVE-2019-13056?
To fix CVE-2019-13056, ensure that you update CyberPanel to a version above 1.8.4 and implement proper CSRF protection.
What types of attacks can CVE-2019-13056 facilitate?
CVE-2019-13056 can facilitate unauthorized changes to an administrator's email and password, potentially allowing full account takeover.
Which versions of CyberPanel are affected by CVE-2019-13056?
CyberPanel versions up to and including 1.8.4 are affected by CVE-2019-13056.
Are there any workarounds for CVE-2019-13056?
Currently, the best workaround for CVE-2019-13056 is to restrict access to the user edit page while implementing CSRF protection.