CVE-2024-53376: OS Command Injection
Published Dec 16, 2024
·Updated
CyberPanel before 2.3.8 allows remote authenticated users to execute arbitrary commands via shell metacharacters in the phpSelection field to the websites/submitWebsiteCreation URI.
Affected Software
2 affected components
CyberPanel CyberPanel<2.3.8
CyberPanel CyberPanel<2.3.8
Event History
Dec 16, 2024
CVE Published
via MITRE·12:00 AM
Data Sourced
via MITRE·12:00 AM
Description
Data Sourced
via NVD·04:15 AM
DescriptionSeverityWeaknessAffected Software
Frequently Asked Questions
1
What is the severity of CVE-2024-53376?
CVE-2024-53376 is rated as a high severity vulnerability due to the potential for remote command execution.
2
How do I fix CVE-2024-53376?
To fix CVE-2024-53376, update CyberPanel to version 2.3.8 or later as this version resolves the vulnerability.
3
Who is affected by CVE-2024-53376?
CVE-2024-53376 affects all versions of CyberPanel prior to 2.3.8.
4
What type of vulnerability is CVE-2024-53376?
CVE-2024-53376 is a remote command execution vulnerability.
5
What actions can an attacker perform with CVE-2024-53376?
An attacker can execute arbitrary commands on the server by manipulating the phpSelection field in the website creation form.