What is CVE-2024-51568?

CVE-2024-51568 is a critical-severity vulnerability in N/a. CVSS score: 10.0/10. Published 2024-10-29.

How severe is CVE-2024-51568?

Critical severity. CVSS v3 base score is 10.0 out of 10.

Is CVE-2024-51568 known to be exploited?

2 public proof-of-concept repositories are indexed. Not currently listed in the CISA KEV catalog.

Vulnerability in N/a

CVE-2024-51568

CyberPanel (aka Cyber Panel) before 2.3.5 allows Command Injection via completePath in the ProcessUtilities.outputExecutioner() sink. There is /filemanager/upload (aka File Manager upload) unauthenticated remote code execution via shell me…

EPSS: 0.930 (99.8th percentile) — read the EPSS interpretation.

CVSS v3 metric

CVSS v3 base score 10.0 (Critical). Vector: CVSS:3.1/AC:L/AV:N/A:H/C:H/I:H/PR:N/S:C/UI:N.

Affected products

N/a — versions n/a

Public proof-of-concept exploits

jsnv-dev/CVE-2024-51568---CyberPanel-Command-Injection-Nuclei-Template
rapid7/metasploit-framework

References

cwe.mitre.org/data/definitions/78.html
dreyand.rs/code/review/2024/10/27/what-are-my-options-cyberpanel-v236-pre-auth-…
cyberpanel.net/KnowledgeBase/home/change-logs/
cyberpanel.net/blog/cyberpanel-v2-3-5

Frequently asked questions

What is CVE-2024-51568?: CVE-2024-51568 is a critical-severity vulnerability in N/a. CVSS score: 10.0/10. Published 2024-10-29.
How severe is CVE-2024-51568?: Critical severity. CVSS v3 base score is 10.0 out of 10.
Is CVE-2024-51568 known to be exploited?: 2 public proof-of-concept repositories are indexed. Not currently listed in the CISA KEV catalog.