CVE-2024-51378—CyberPanel Incorrect Default Permissions Vulnerability

PUBLISHEDvulnerability record
2024-12-04 · last modified June 21, 2025

Metadata

CVE ID：
CVE-2024-51378
项目：
CyberPersons
产品：
CyberPanel
添加日期：
2024-12-04
到期日：
2024-12-25
最后更新：
June 21, 2025

漏洞名称

CyberPanel Incorrect Default Permissions Vulnerability

描述

CyberPanel contains an incorrect default permissions vulnerability that allows for authentication bypass and the execution of arbitrary commands using shell metacharacters in the statusfile property.

已知用于勒索软件活动吗？

勒索软件状态：
KNOWN

采集行动

Apply mitigations per vendor instructions or discontinue use of the product if mitigations are unavailable.

其他说明

  • https://cyberpanel.net/KnowledgeBase/home/change-logs/
  • https://nvd.nist.gov/vuln/detail/CVE-2024-51378

相关新闻文章

相关 CWE

browse all CVEs