PatchTheCVEcentos web panel vulnerabilities and fixes
Recent CVEs affecting centos web panel, with upgrade or downgrade steps. 6 tracked.
Also searched as: centoswebpanel.
centos web panel has 6 tracked vulnerabilities, 1 critical. A fixed release or vendor patch exists for 0. Most recent: 2020-07-28. Highest priority: CVE-2020-15609 (score 63/100).
- CVE-2020-15609 CRITICAL 9.8 DOWNGRADE This vulnerability allows remote attackers to execute arbitrary code on affected installations of CentOS Web P
- CVE-2019-14246 MEDIUM 6.5 DOWNGRADE In CentOS-WebPanel.com (aka CWP) CentOS Web Panel 0.9.8.851, an insecure object reference allows an attacker t
- CVE-2019-14245 MEDIUM 6.5 DOWNGRADE In CentOS-WebPanel.com (aka CWP) CentOS Web Panel 0.9.8.851, an insecure object reference allows an attacker t
- CVE-2019-13386 HIGH 8.8 DOWNGRADE In CentOS-WebPanel.com (aka CWP) CentOS Web Panel 0.9.8.846, a hidden action=9 feature in filemanager2.php all
- CVE-2019-10893 MEDIUM 4.8 MITIGATE CentOS-WebPanel.com (aka CWP) CentOS Web Panel 0.9.8.793 (Free/Open Source Version) and 0.9.8.753 (Pro) is vul
- CVE-2019-10261 MEDIUM 4.8 MITIGATE CentOS Web Panel (CWP) 0.9.8.789 is vulnerable to Stored/Persistent XSS for the "Name Server 1" and "Name Serv
FAQ
How do I fix centos web panel vulnerabilities?
Open the CVE for your version, check the affected range, then follow the listed action: upgrade to the fixed release, or downgrade or mitigate if no fix exists yet. Commands for each OS are shown on every CVE page.
Is centos web panel being exploited right now?
None of the tracked centos web panel CVEs are on the CISA Known Exploited Vulnerabilities list at the moment. This is checked every 20 minutes.
Which centos web panel CVE should I patch first?
CVE-2020-15609 currently ranks highest (63/100): This vulnerability allows remote attackers to execute arbitrary code on affected installations of CentOS Web P.