CVE-2024-51568

Published: 2024-10-29T23:15Z

Last Modified: 2024-11-01T12:57Z

Source: MITRE CVE List

License: MITRE-CVE-TOS

CyberPanel (aka Cyber Panel) before 2.3.5 allows Command Injection via completePath in the ProcessUtilities.outputExecutioner() sink. There is /filemanager/upload (aka File Manager upload) unauthenticated remote code execution via shell metacharacters. > MITRE Terms of Use apply – see LICENSE‑MITRE.txt