cPanel before 86.0.14 allows attackers to obtain access to the current working directory via the account backup feature (SEC-540).
Affected Software
| Name | Vendor | Start Version | End Version |
|---|---|---|---|
| Cpanel | Cpanel | 11.78.0.1 (including) | 11.78.0.47 (excluding) |
| Cpanel | Cpanel | 11.84.0.0 (including) | 11.84.0.22 (excluding) |
| Cpanel | Cpanel | 11.86.0.1 (including) | 11.86.0.14 (excluding) |