漏洞描述
CloudPanel 2 before 2.3.1 has insecure file-manager cookie authentication.
影响产品
修复建议
建议关注厂商安全公告，及时升级至已修复版本，并结合实际资产暴露情况采取缓解措施。
参考链接
nvd.nist.govhttps://nvd.nist.gov/vuln/detail/CVE-2023-35885↗www.datack.myhttps://www.datack.my/fallingskies-cloudpanel-0-day/↗github.comhttps://github.com/datackmy/FallingSkies-CVE-2023-35885↗www.cloudpanel.iohttps://www.cloudpanel.io/docs/v2/changelog/↗github.comhttps://github.com/Tropinene/Yscanner↗