CVE-2024-51378: CyberPanel Incorrect Default Permissions Vulnerability
CyberPanel contains an incorrect default permissions vulnerability that allows for authentication bypass and the execution of arbitrary commands using shell metacharacters in the statusfile property.
Other sources
getresetstatus in dns/views.py and ftp/views.py in CyberPanel (aka Cyber Panel) before 1c0c6cb allows remote attackers to bypass authentication and execute arbitrary commands via /dns/getresetstatus or /ftp/getresetstatus by bypassing secMiddleware (which is only for a POST request) and using shell metacharacters in the statusfile property, as exploited in the wild in October 2024 by PSAUX. Versions through 2.3.6 and (unpatched) 2.3.7 are affected.
— MITRE
Affected Software
Remediation
Recommended actions to resolve this vulnerability, in priority order.
- Upgrade
Upgrade
CyberPanel (Cyber Panel)to a version that resolves this vulnerability.Fixed in 2.3.6 - Upgrade
Upgrade
CyberPanel (Cyber Panel)to a version that resolves this vulnerability.Fixed in 2.3.7Patch 1c0c6cb - Upgrade
Upgrade
CyberPanel (Cyber Panel)to a version that resolves this vulnerability.Patch 1c0c6cb - Compensating control
If you cannot patch to include commit 1c0c6cb, discontinue use of CyberPanel or restrict access to the vulnerable endpoints /dns/getresetstatus and /ftp/getresetstatus to prevent remote exploitation of the authentication bypass and arbitrary command execution.
Event History
Frequently Asked Questions
What is the severity of CVE-2024-51378?
CVE-2024-51378 is classified as a high-severity vulnerability due to its potential for authentication bypass and arbitrary command execution.
How do I fix CVE-2024-51378?
To fix CVE-2024-51378, update CyberPanel to the latest version that addresses the incorrect default permissions.
What types of attacks can CVE-2024-51378 facilitate?
CVE-2024-51378 can facilitate authentication bypass and the execution of arbitrary commands through shell metacharacters.
Which versions of CyberPanel are affected by CVE-2024-51378?
CVE-2024-51378 affects CyberPanel versions prior to 2.3.8.
What components in CyberPanel are vulnerable in CVE-2024-51378?
CVE-2024-51378 affects the getresetstatus function in dns/views.py and ftp/views.py components of CyberPanel.