cPanel has patched a flaw that let an authenticated hosting customer execute SQL in the database's root context, crossing the privilege boundary between a cPanel account and the server's administrative database identity. It shipped in a targeted security release that closes two other routes past account boundaries. The database bug is tracked as CVE202658048 CVSS 4.0 score 9.4 and affects.📖 Read more.
🔗 Via "The Hacker News"
----------
👁️ Seen on @cibsecurity