Threats tagged 'ghsa-vx2w-cj7g-8hcf'

1 threat

Severity	CVSS	Signals	Threat	Source	Published	Score and star
Critical	9.0	KEVEPSS 99%	CVE-2025-48703CWP (aka Control Web Panel or CentOS Web Panel) before 0.9.8.1205 allows unauthenticated remote code execution via Critical9.0KEVEPSS 99%2025-09-22GCVE DatabaseCVE-2025-48703 CWP (Control Web Panel or CentOS Web Panel) versions before 0.9.8.1205 contain a critical vulnerability that allows unauthenticated remote code execution. The flaw arises from improper handling of shell metacharacters in the t_total parameter within a filemanager changePerm request. Exploitation requires knowledge of a valid non-root username. KEVEPSS 99%Report on CVE-2025-48703 Vulnerability CWE-78 #ghsa-vx2w-cj7g-8hcf	GCVE Database	2025-09-22

Page 1 of 1