cPanel flaw exposes any mail account's calendar and contacts
Anyone can peek at mail calendars and contacts on web hosting control panels.
Summary
An improper NUL byte neutralization in cPanel lets remote attackers read any mail account's calendar and contact data. The source does not state any further conditions for the attack.
What to do
Update to 11.110.0.154, 11.134.0.67, 11.136.0.51 or 11.138.0.19 or later for your release line. Check that your version is newer than the bound for your line and read the vendor's advisory.
Products and platforms
CVE IDs
Times
First published
First seen