| Package | Affected versions | Patched versions |
|---|---|---|
| cpanel | < 70.0.23 | 70.0.23 |
In cPanel before 70.0.23, OpenID providers can inject arbitrary data into cPanel session files (SEC-368).
Running one of these products? Scan your site to see whether it exposes a vulnerable version.
Scan my site free