.. / CVE-2023-35885

• RCE
• Nuclei
• Web

Exploit for Cloudpanel 2 < 2.3.1 - Remote Code Execution (CVE-2023-35885)

Description:

CloudPanel 2 before 2.3.1 has insecure file-manager cookie authentication.

Nuclei Template

View the template here CVE-2023-35885.yaml

Validate with Nuclei

echo "$URL" | nuclei -t ~/nuclei-templates/http/cves/2023/CVE-2023-35885.yaml

References: