CVE-2024-54679

CyberPanel (aka Cyber Panel) before 6778ad1 does not require the FilemanagerAdmin capability for restartMySQL actions.

Score

CVSS 3.1 6.5 Medium

Status

Analyzed - cve@mitre.org

Published

2024-12-05

Last modified

2024-12-06

Weaknesses

CWE-862

Affected products

• Cyberpanel (Cyberpanel)

References

• https://cyberpanel.net/
• https://github.com/hotplugin0x01/CVE-2024-54679
• https://github.com/usmannasir/cyberpanel/commit/6778ad1eaae41f72365da8fd021f9a60369600dc