[0day-rubbish] CloudPanel 2.5.... Note

[0day-rubbish] CloudPanel 2.5.4-3 site-settings rootDirectory nginx virtual-host injection to host root code execution (8.8)

Posted by disclosure via Fulldisclosure on Oct 150day Rubbish Research Team is publicly disclosing a vulnerability in CloudPanel Community Edition 2.5.4-3+clp-bookworm, the closed-source server-management panel from cloudpanel.io (Germany) that provisions and supervises nginx, php-fpm, MariaDB and hosted web sites from a Symfony application listening on port 8443. The build under advisory is the vendor's own distribution package, 69,183,476 bytes, md5 24c36a4739ce065c5c188c89def06f29, on...