CVE-2021-27231

Published February 16th, 2021

View on NVD ↗

CVSS v3

5.4

MEDIUM

CVSS v2

5.5

MEDIUM

Affected

PROJECTS

Description

Hestia Control Panel 1.3.5 and below, in a shared-hosting environment, sometimes allows remote authenticated users to create a subdomain for a different customer's domain name, leading to spoofing of services or email messages.

hestiacp/hestiacp

Hestia Control Panel | A lightweight and powerful control panel for the modern web.

GitHub

4.38K

sickcodes/security

Collection of CVEs from Sick Codes, or collaborations on https://sick.codes security research & advisories.

GitHub