CVE-2023-29489

CVSS V2 None CVSS V3 None
Description
An issue was discovered in cPanel before 11.109.9999.116. XSS can occur on the cpsrvd error page via an invalid webcall ID, aka SEC-669. The fixed versions are 11.109.9999.116, 11.108.0.13, 11.106.0.18, and 11.102.0.31.
Overview
  • CVE ID
  • CVE-2023-29489
  • Assigner
  • cve@mitre.org
  • Vulnerability Status
  • Received
  • Published Version
  • 2023-04-27T21:15:10
  • Last Modified Date
  • 2023-04-27T21:15:10
References
Reference URL Reference Tags
https://blog.assetnote.io/2023/04/26/xss-million-websites-cpanel/
https://forums.cpanel.net/threads/cpanel-tsr-2023-0001-full-disclosure.708949/
Sources
Source Name Source URL
NIST https://nvd.nist.gov/vuln/detail/CVE-2023-29489
MITRE https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-29489
History
Created Old Value New Value Data Type Notes
2023-04-27 22:01:32 Added to TrackCVE