← Back to browse
·
API
CVE-2023-35885
Severity
CRITICAL
CVSS
9.8
EPSS
0.74888
Risk score
65.41
CISA KEV
No
PoC
No
Published
2023-06-20
Modified
2024-12-09
First seen
2026-08-07
Aliases
EUVD-2023-39878, GHSA-WMRX-G8F2-RGWH
Products
n/a:n/a n/a
Sources
euvd
EUVD-2023-39878
Description
CloudPanel 2 before 2.3.1 has insecure file-manager cookie authentication.
References
https://euvd.enisa.europa.eu/vulnerability/EUVD-2023-39878
https://www.cloudpanel.io/docs/v2/changelog/
https://www.datack.my/fallingskies-cloudpanel-0-day/
https://github.com/datackmy/FallingSkies-CVE-2023-35885