CVE-2018-20938

Publication date

2019-08-01 16:07:22

Family

mitre

State

PUBLISHED

Description

cPanel before 68.0.27 does not enforce ownership during addpkgext and delpkgext WHM API calls (SEC-324).