Is CVE-2023-29489 actively exploited?

CVE-2023-29489 has no public evidence of in-the-wild exploitation as of 2024-11-21.

What is the CVSS score for CVE-2023-29489?

CVE-2023-29489 has a CVSS score of 5.3 (MEDIUM severity). Vector: CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:L.

How do I patch CVE-2023-29489?

Patch guidance is available from cpanel security advisories. CVEDatabase generates AI-assisted remediation guidance on demand for CVE-2023-29489.

CVE-2023-29489 - remediation guidance & executive summary

Q: Which products are affected by CVE-2023-29489?

4 products: cpanel cpanel, cpanel cpanel, cpanel cpanel, cpanel cpanel.

Description

An issue was discovered in cPanel before 11.109.9999.116. XSS can occur on the cpsrvd error page via an invalid webcall ID, aka SEC-669. The fixed versions are 11.109.9999.116, 11.108.0.13, 11.106.0.18, and 11.102.0.31.

CVSS Metrics

Vector: CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:L
Attack Vector: local
Complexity: low
Privileges: low
User Action: none
Scope: unchanged
Confidentiality: low
Integrity: low
Availability: low
Weaknesses: CWE-79 · Cross-site Scripting (XSS)

Metadata

Primary Vendor: CPANEL
Published: 4/27/2023
Last Modified: 11/21/2024
Source: NIST NVD
Note: Verify all details with official vendor sources before applying patches.

CVE-2023-29489

Description

CVSS Metrics

Metadata

Affected Products

Remediation Guidance

Executive Summary