| Package | Affected versions | Patched versions |
|---|---|---|
| cpanel | ≥ 67.9999.64, < 68.0.39≥ 69.9999.122, < 70.0.43≥ 71.9980.30, < 71.9980.37 | 68.0.3970.0.4371.9980.37 |
In cPanel before 71.9980.37, API tokens retain ACLs after those ACLs are removed from the corresponding accounts (SEC-393).
Running one of these products? Scan your site to see whether it exposes a vulnerable version.
Scan my site free