CyberRota Analysis
AI-GeneratedCyberPanel versions 2.4.3 to 2.4.5 contain unauthenticated debugging endpoints that expose sensitive information, including administrator usernames and account metadata. This vulnerability allows attackers to enumerate administrators and recent scan activity, potentially leading to further exploitation of multi-tenant installations. Organizations using affected versions should prioritize remediation to mitigate the risk of unauthorized access and subsequent attacks.
Public Exploit Signal
A public exploit, PoC, GitHub repository or Metasploit reference was detected for this CVE.
Note: these links are listed for security research and verification purposes only.
Original NVD Description
CyberPanel versions 2.4.3 through 2.4.5 expose unauthenticated AI Scanner debugging endpoints that disclose administrator usernames, API-key prefixes, scan identifiers, target domains, and account metadata. Unauthenticated attackers can enumerate panel administrators and recent scanner activity to inventory multi-tenant installations and facilitate follow-on attacks.