CVE-2023-33747

概要

参考情報

• packetstormsecurity.com/files/172768/CloudPanel-2.2.2-Privilege-Escalation-Path-Traversal.html · Exploit
• cwe.mitre.org/data/definitions/264.html · Not Applicable
• cwe.mitre.org/data/definitions/269.html · Not Applicable
• cwe.mitre.org/data/definitions/35.html · Not Applicable
• EagleTube/CloudPanel · Exploit
• cloudpanel.io/docs/v2/changelog · Release Notes

cloudpanel のその他の脆弱性

• CVE-2024-24320高 8.8Directory Traversal vulnerability in Mgt-commerce CloudPanel v.2.0.0 thru v.2.4.0 allows a remote attacker to obtain sensitive information a…
• CVE-2023-46157高 8.8File-Manager in MGT CloudPanel 2.0.0 through 2.3.2 allows the lowest privilege user to achieve OS command injection by changing file ownersh…
• CVE-2023-36630高 8.8In CloudPanel before 2.3.1, insecure file upload leads to privilege escalation and authentication bypass.
• CVE-2023-35885緊急 9.8CloudPanel 2 before 2.3.1 has insecure file-manager cookie authentication.
• CVE-2023-0391高 8.1MGT-COMMERCE CloudPanel ships with a static SSL certificate to encrypt communications to the administrative interface, shared across every i…