Threats tagged 'ghsa-pqwj-3fcg-h8pr'

Control Web Panel (CWP) versions before 1.12 have a critical execution after redirect vulnerability in the user panel authentication flow. This flaw allows attackers with only a valid hosting username to bypass authentication and execute code paths normally restricted to authenticated users, potentially leading to root access.