CVE-2023-46157 | BDVDB-2026-218809 Detail

Description#

File-Manager in MGT CloudPanel 2.0.0 through 2.3.2 allows the lowest privilege user to achieve OS command injection by changing file ownership and changing file permissions to 4755.

Impact#

No impact statement in the source data.

Weaknesses#

No weakness recorded in the source data.

References#

https://www.cloudpanel.io/docs/v2/changelog/
https://www.mgt-commerce.com/docs/mgt-cloudpanel/dashboard

Exploit#

No public exploit known

History#

Version 12023-12-08Record published in the CVE List.
Version 22024-11-26Most recent update recorded in the CVE List.