5.4

CVE-2017-11441

The WHM Upload Locale interface in cPanel before 56.0.51, 58.x before 58.0.52, 60.x before 60.0.45, 62.x before 62.0.27, 64.x before 64.0.33, and 66.x before 66.0.2 has XSS via a locale filename, aka SEC-297.
Daten sind bereitgestellt durch National Vulnerability Database (NVD)
Cpanel ≫ Whm Version <= 56.0.50
Cpanel ≫ Whm Version 58.0.3
Cpanel ≫ Whm Version 58.0.4
Cpanel ≫ Whm Version 58.0.5
Cpanel ≫ Whm Version 58.0.6
Cpanel ≫ Whm Version 58.0.7
Cpanel ≫ Whm Version 58.0.8
Cpanel ≫ Whm Version 58.0.11
Cpanel ≫ Whm Version 58.0.12
Cpanel ≫ Whm Version 58.0.13
Cpanel ≫ Whm Version 58.0.17
Cpanel ≫ Whm Version 58.0.19
Cpanel ≫ Whm Version 58.0.20
Cpanel ≫ Whm Version 58.0.23
Cpanel ≫ Whm Version 58.0.24
Cpanel ≫ Whm Version 58.0.25
Cpanel ≫ Whm Version 58.0.26
Cpanel ≫ Whm Version 58.0.27
Cpanel ≫ Whm Version 58.0.28
Cpanel ≫ Whm Version 58.0.29
Cpanel ≫ Whm Version 58.0.30
Cpanel ≫ Whm Version 58.0.31
Cpanel ≫ Whm Version 58.0.32
Cpanel ≫ Whm Version 58.0.34
Cpanel ≫ Whm Version 58.0.36
Cpanel ≫ Whm Version 58.0.37
Cpanel ≫ Whm Version 58.0.41
Cpanel ≫ Whm Version 58.0.43
Cpanel ≫ Whm Version 58.0.44
Cpanel ≫ Whm Version 58.0.45
Cpanel ≫ Whm Version 58.0.46
Cpanel ≫ Whm Version 58.0.47
Cpanel ≫ Whm Version 58.0.48
Cpanel ≫ Whm Version 58.0.49
Cpanel ≫ Whm Version 58.0.50
Cpanel ≫ Whm Version 58.0.51
Cpanel ≫ Whm Version 60.0.3
Cpanel ≫ Whm Version 60.0.4
Cpanel ≫ Whm Version 60.0.5
Cpanel ≫ Whm Version 60.0.6
Cpanel ≫ Whm Version 60.0.8
Cpanel ≫ Whm Version 60.0.9
Cpanel ≫ Whm Version 60.0.10
Cpanel ≫ Whm Version 60.0.11
Cpanel ≫ Whm Version 60.0.12
Cpanel ≫ Whm Version 60.0.13
Cpanel ≫ Whm Version 60.0.14
Cpanel ≫ Whm Version 60.0.15
Cpanel ≫ Whm Version 60.0.17
Cpanel ≫ Whm Version 60.0.18
Cpanel ≫ Whm Version 60.0.19
Cpanel ≫ Whm Version 60.0.22
Cpanel ≫ Whm Version 60.0.24
Cpanel ≫ Whm Version 60.0.25
Cpanel ≫ Whm Version 60.0.26
Cpanel ≫ Whm Version 60.0.27
Cpanel ≫ Whm Version 60.0.28
Cpanel ≫ Whm Version 60.0.31
Cpanel ≫ Whm Version 60.0.32
Cpanel ≫ Whm Version 60.0.34
Cpanel ≫ Whm Version 60.0.35
Cpanel ≫ Whm Version 60.0.36
Cpanel ≫ Whm Version 60.0.37
Cpanel ≫ Whm Version 60.0.38
Cpanel ≫ Whm Version 60.0.39
Cpanel ≫ Whm Version 60.0.42
Cpanel ≫ Whm Version 60.0.43
Cpanel ≫ Whm Version 60.0.44
Cpanel ≫ Whm Version 62.0.1
Cpanel ≫ Whm Version 62.0.2
Cpanel ≫ Whm Version 62.0.4
Cpanel ≫ Whm Version 62.0.5
Cpanel ≫ Whm Version 62.0.6
Cpanel ≫ Whm Version 62.0.7
Cpanel ≫ Whm Version 62.0.8
Cpanel ≫ Whm Version 62.0.9
Cpanel ≫ Whm Version 62.0.10
Cpanel ≫ Whm Version 62.0.11
Cpanel ≫ Whm Version 62.0.12
Cpanel ≫ Whm Version 62.0.14
Cpanel ≫ Whm Version 62.0.15
Cpanel ≫ Whm Version 62.0.16
Cpanel ≫ Whm Version 62.0.17
Cpanel ≫ Whm Version 62.0.19
Cpanel ≫ Whm Version 62.0.20
Cpanel ≫ Whm Version 62.0.23
Cpanel ≫ Whm Version 62.0.24
Cpanel ≫ Whm Version 62.0.26
Cpanel ≫ Whm Version 64.0.0
Cpanel ≫ Whm Version 64.0.1
Cpanel ≫ Whm Version 64.0.2
Cpanel ≫ Whm Version 64.0.3
Cpanel ≫ Whm Version 64.0.4
Cpanel ≫ Whm Version 64.0.7
Cpanel ≫ Whm Version 64.0.9
Cpanel ≫ Whm Version 64.0.11
Cpanel ≫ Whm Version 64.0.12
Cpanel ≫ Whm Version 64.0.13
Cpanel ≫ Whm Version 64.0.14
Cpanel ≫ Whm Version 64.0.15
Cpanel ≫ Whm Version 64.0.17
Cpanel ≫ Whm Version 64.0.18
Cpanel ≫ Whm Version 64.0.19
Cpanel ≫ Whm Version 64.0.20
Cpanel ≫ Whm Version 64.0.21
Cpanel ≫ Whm Version 64.0.22
Cpanel ≫ Whm Version 64.0.24
Cpanel ≫ Whm Version 64.0.27
Cpanel ≫ Whm Version 64.0.28
Cpanel ≫ Whm Version 64.0.29
Cpanel ≫ Whm Version 64.0.30
Cpanel ≫ Whm Version 64.0.31
Cpanel ≫ Whm Version 64.0.32
Cpanel ≫ Whm Version 66.0.1
Zu dieser CVE wurde keine Warnung gefunden.
EPSS Metriken
Typ Quelle Score Percentile
EPSS FIRST.org 0.51% 0.394
CVSS Metriken
Quelle Base Score Exploit Score Impact Score Vector String
NIST 5.4 2.3 2.7
CVSS:3.0/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N
NIST 3.5 6.8 2.9
AV:N/AC:M/Au:S/C:N/I:P/A:N
CWE-79 Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')

The product does not neutralize or incorrectly neutralizes user-controllable input before it is placed in output that is used as a web page that is served to other users.

https://news.cpanel.com/cpanel-tsr-2017-0004-full-disclosure/
Vendor Advisory