CVE-2024-54679

Published Dec 5, 2024

Last updated 3 months ago

CVSS medium 4.3

Overview

Description
CyberPanel (aka Cyber Panel) before 6778ad1 does not require the FilemanagerAdmin capability for restartMySQL actions.
Source
cve@mitre.org
NVD status
Awaiting Analysis

Risk scores

CVSS 3.1

Type
Secondary
Base score
4.3
Impact score
1.4
Exploitability score
2.8
Vector string
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:L
Severity
MEDIUM

Weaknesses

134c704f-9b21-4f2e-91b3-4a467353bcc0
CWE-862

Social media

Hype score
Not currently trending

  1. #exploit 1. CVE-2024-54679: Cyber Panel DoS https://t.co/GHmXsKcIWb 2. CVE-2024-39090: CSRF to Stored XSS in PHP Gurukul Online Shopping Portal v2.0 https://t.co/fcjV63Nlk0 3. CVE-2023-23586: Linux vDSO and VVAR https://t.co/cSoVPFnrDZ

    @VIPER92929

    24 Dec 2024

    3 Impressions

    0 Retweets

    0 Likes

    0 Bookmarks

    0 Replies

    0 Quotes

  2. #exploit 1. CVE-2024-54679: Cyber Panel DoS https://t.co/Z02Yo94Kf0 2. CVE-2024-39090: CSRF to Stored XSS in PHP Gurukul Online Shopping Portal v2.0 https://t.co/aJpMwa9INt 3. CVE-2023-23586: Linux vDSO and VVAR https://t.co/5gcQOiRNpK

    @ksg93rd

    22 Dec 2024

    141 Impressions

    0 Retweets

    2 Likes

    0 Bookmarks

    0 Replies

    0 Quotes

  3. [+] Little Achievement Update! I've discovered a new security vulnerability, CVE-2024-54679, in CyberPanel (aka Cyber Panel), a widely-used web hosting control panel powered by OpenLiteSpeed. CVE Identifier: CVE-2024-54679 Advisory: https://t.co/vt1FcEwxlS

    @hotplugin0x01

    6 Dec 2024

    767 Impressions

    2 Retweets

    9 Likes

    2 Bookmarks

    1 Reply

    0 Quotes

  4. CVE-2024-54679 CyberPanel (aka Cyber Panel) before 6778ad1 does not require the FilemanagerAdmin capability for restartMySQL actions. https://t.co/9Eh3zE3TVS

    @CVEnew

    5 Dec 2024

    307 Impressions

    0 Retweets

    1 Like

    0 Bookmarks

    0 Replies

    0 Quotes

References