CVE-2024-51567

CRITICAL

CVSS v3

9.8

CRITICAL

EPSS Score

94.3%

exploit probability

CISA KEV

No

known exploited

Exploitation

SSVC status

Description

upgrademysqlstatus in databases/views.py in CyberPanel (aka Cyber Panel) before 5b08cd6 allows remote attackers to bypass authentication and execute arbitrary commands via /dataBases/upgrademysqlstatus by bypassing secMiddleware (which is only for a POST request) and using shell metacharacters in the statusfile property, as exploited in the wild in October 2024 by PSAUX. Versions through 2.3.6 and (unpatched) 2.3.7 are affected.

Technical Details

Published
10/29/2024

Frequently Asked Questions

What is CVE-2024-51567?

upgrademysqlstatus in databases/views.py in CyberPanel (aka Cyber Panel) before 5b08cd6 allows remote attackers to bypass authentication and execute arbitrary commands via /dataBases/upgrademysqlstatus by bypassing secMiddleware (which is only for a POST request) and using shell metacharacters in the statusfile property, as exploited in the wild in October 2024 by PSAUX. Versions through 2.3.6 and (unpatched) 2.3.7 are affected.

Is CVE-2024-51567 actively exploited?

Active exploitation of CVE-2024-51567 has not been confirmed. The EPSS score is 94.3%, indicating the estimated probability of exploitation in the next 30 days.

What is the CVSS score for CVE-2024-51567?

CVE-2024-51567 has a CVSS v3 base score of 9.8 (CRITICAL severity).

Is CVE-2024-51567 affecting your environment?

Use isMalicious to check if any of your IPs or domains are associated with this vulnerability's IOCs.