CVE-2024-51567criticalunder attackransomwareCWE-306

CVE-2024-51567

Published · Updated

Follow this CVE+ Monitor CyberPanel

E-mail alert when it lands in KEV, gets a public PoC or its score goes up.

100Vexday Risk Score

Patch now. It under exploitation confirmed by CISA and has a working public exploit.

ssvc Actcvss 10epss 84%
from disclosure to weapon2 days
Published on NVDOct 29
1st PoC+2d
metasploitOct 27
CISA KEV+9d
Action required by CISAfederal deadline: 2024-11-28

Apply mitigations per vendor instructions or discontinue use of the product if mitigations are unavailable.

In short

CyberPanel has a critical flaw where attackers can skip authentication checks and run dangerous commands on the server by sending requests to a specific URL. This happens because the security check only works for certain types of requests, leaving a gap that allows attackers to take full control.

Technical detail

The upgrademysqlstatus endpoint in databases/views.py lacks proper authentication enforcement due to secMiddleware only validating POST requests, enabling attackers to bypass authentication via GET/other methods and inject arbitrary shell commands through the statusfile parameter. Successful exploitation grants unauthenticated remote code execution with server-level privileges.

Summary generated and translated by AI from the official description.

The full analysis of this CVE is available in Portuguese →

upgrademysqlstatus in databases/views.py in CyberPanel (aka Cyber Panel) before 5b08cd6 allows remote attackers to bypass authentication and execute arbitrary commands via /dataBases/upgrademysqlstatus by bypassing secMiddleware (which is only for a POST request) and using shell metacharacters in the statusfile property, as exploited in the wild in October 2024 by PSAUX. Versions through 2.3.6 and (unpatched) 2.3.7 are affected.
CVSS:3.1/AC:L/AV:N/A:H/C:H/I:H/PR:N/S:C/UI:N
Affected products
n/a · n/a
⚠ Public resources, to assess the exposure of systems you control or are authorized to test. Test only with authorization.