HIGH🇵🇱 Wersja polska

CVE-2023-33747

CVSS 7.8v3.1pub. 2023-06-06upd. 2025-01-08

CloudPanel v2.2.2 allows attackers to execute a path traversal.

CVSS Vector
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

  • Mgt Commerce Cloudpanel

    APP
    Mgt-Commerce
    2.0.0 – 2.2.2
🔵
CHECK WITH VENDOR
No clear patch data available. Check vendor references.
Tags
Path Traversal
CWE
References

Related vulnerabilities

CVE-2023-35885CRITICAL9.8ten sam produkt

CloudPanel 2 before 2.3.1 has insecure file-manager cookie authentication.

CVE-2024-24320HIGH8.8ten sam produkt

Directory Traversal vulnerability in Mgt-commerce CloudPanel v.2.0.0 thru v.2.4.0 allows a remote attacker to ...

CVE-2023-46157HIGH8.8ten sam produkt

File-Manager in MGT CloudPanel 2.0.0 through 2.3.2 allows the lowest privilege user to achieve OS command inje...

CVE-2023-36630HIGH8.8ten sam produkt

In CloudPanel before 2.3.1, insecure file upload leads to privilege escalation and authentication bypass.

CVE-2023-0391HIGH8.1ten sam produkt

MGT-COMMERCE CloudPanel ships with a static SSL certificate to encrypt communications to the administrative in...