CVE-2020-29135 :: Enginsight Vulnerability Database

Provider	Type	Base Score	Atk. Vector	Atk. Complexity	Priv. Required	Vector
NIST	NIST	4.1 MEDIUM	NETWORK	LOW	LOW	CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:N/I:L/A:N
mitre	CNA	---				---
CVE	ADP	---				---

Base Score

CVSS 3.x

EPSS Score

Percentile: 44%

Vendor	Product	Version
cpanel	cpanel	𝑥 < 90.0.17

𝑥

= Vulnerable software versions

Common Weakness Enumeration

CWE-838 - Inappropriate Encoding for Output Context
The software uses or specifies an encoding when generating output to a downstream component, but the specified encoding is not the same as the encoding that is expected by the downstream component.

References

https://docs.cpanel.net/changelogs/90-change-log/

https://news.cpanel.com/cpanel-tsr-2020-0007-full-disclosure/

https://docs.cpanel.net/changelogs/90-change-log/