cPanel TSR-2020-0003 Full Disclosure

SEC-485 Summary Remote code execution via Exim filter path handling. Security Rating cPanel has assigned this vulnerability a CVSSv3 score of 9.9 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H Description The handling of file paths constructed from email recipient addresses in cPanel & WHM’s default Exim configuration did not adequately protect against path traversal attacks. In …