Skip to content
CVE PROGRAM SOURCE RECORD9.8 Critical

CVE-2024-24621

Softaculous Webuzo Authentication Bypass

Description

Softaculous Webuzo contains an authentication bypass vulnerability through the password reset functionality. Remote, anonymous attackers can exploit this vulnerability to gain full server access as the root user.

Affected products

Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.

Softaculous Webuzo

Default version status: unaffected

  • 3.2.1 to ≤ 4.2.9affected

References