漏洞描述
An issue was discovered in cPanel before 11.109.9999.116. Cross Site Scripting can occur on the cpsrvd error page via an invalid webcall ID.
影响产品
修复建议
建议关注厂商安全公告，及时升级至已修复版本，并结合实际资产暴露情况采取缓解措施。
参考链接
blog.assetnote.iohttps://blog.assetnote.io/2023/04/26/xss-million-websites-cpanel/↗nvd.nist.govhttps://nvd.nist.gov/vuln/detail/CVE-2023-29489↗forums.cpanel.nethttps://forums.cpanel.net/threads/cpanel-tsr-2023-0001-full-disclosure.708949/↗github.comhttps://github.com/SynixCyberCrimeMy/CVE-2023-29489↗github.comhttps://github.com/learnerboy88/CVE-2023-29489↗