CVE-2023-35885

Summary

CVE-2023-35885 is a vulnerability affecting CloudPanel version 2 and below 2.3.1. This issue stems from insecure file-manager cookie authentication in CloudPanel, allowing unauthorized users to gain unintended access to sensitive data or functionalities. An attacker could potentially exploit this vulnerability by stealing or forging cookies to bypass authentication, leading to significant security risks for affected CloudPanel installations. System administrators are advised to upgrade to the latest version as soon as possible to mitigate this issue.

Prevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.