CVE-2017-18437 - cPanel before 64.0.21 allows a Webmail account to execute code via forwarders (SEC-240)

MEDIUM

cPanel before 64.0.21 allows a Webmail account to execute code via forwarders (SEC-240)

Published Aug 2, 2019

4.4

MEDIUM

CVSS 3.0

EPSS 0.46%

cPanel before 64.0.21 allows a Webmail account to execute code via forwarders (SEC-240).

No remediation recorded yet.

Weaknesses (1)

CWE-74

Link	Providers	Tags
https://documentation.cpanel.net/display/CL/64+Change+Log		x_refsource_CONFIRMRelease NotesVendor Advisory
https://news.cpanel.com/cpanel-tsr-2017-0003-full-disclosure/		Vendor Advisory

No recorded changes yet.

Sources

Status PUBLISHED

Assigner mitre

Published Aug 2, 2019

Updated Aug 5, 2024

Reserved Jul 31, 2019

Updated n/a

Status Modified

Modified Jun 17, 2026

Severity n/a

Public date n/a