CVE-2023-33747
📋 TL;DR
CloudPanel v2.2.2 contains a path traversal vulnerability that allows attackers to access files outside the intended directory. This affects all systems running CloudPanel v2.2.2, potentially enabling unauthorized file reading or privilege escalation.
💻 Affected Systems
- CloudPanel
📦 What is this software?
Cloudpanel by Mgt Commerce
⚠️ Risk & Real-World Impact
Worst Case
Full system compromise through privilege escalation leading to complete control of the server and all hosted applications.
Likely Case
Unauthorized access to sensitive configuration files, credentials, or application data stored on the server.
If Mitigated
Limited impact with proper file permissions and access controls preventing traversal beyond restricted directories.
🎯 Exploit Status
Exploit details published on Packet Storm Security. Requires some level of access but path traversal is typically straightforward to execute.
🛠️ Fix & Mitigation
✅ Official Fix
Patch Version: v2.2.3 or later
Vendor Advisory: https://github.com/EagleTube/CloudPanel
Restart Required: Yes
Instructions:
1. Backup current configuration. 2. Update CloudPanel using the official update mechanism. 3. Restart CloudPanel services. 4. Verify the update was successful.
🔧 Temporary Workarounds
Restrict File Access
linuxImplement strict file permissions and directory restrictions to limit path traversal impact.
chmod 750 /opt/cloudpanel
chown root:cloudpanel /opt/cloudpanel
Network Segmentation
linuxRestrict access to CloudPanel management interface to trusted IP addresses only.
iptables -A INPUT -p tcp --dport 8443 -s TRUSTED_IP -j ACCEPT
iptables -A INPUT -p tcp --dport 8443 -j DROP
🧯 If You Can't Patch
- Implement strict network access controls to limit who can reach CloudPanel.
- Monitor file access logs for unusual path traversal patterns and implement alerting.
🔍 How to Verify
Check if Vulnerable:
Check CloudPanel version via web interface or configuration files. Version 2.2.2 is vulnerable.Check Version:
cat /opt/cloudpanel/version.txt || grep version /opt/cloudpanel/config/*Verify Fix Applied:
Verify CloudPanel version is 2.2.3 or later and test path traversal attempts return proper access denied errors.📡 Detection & Monitoring
Log Indicators:
- Unusual file access patterns with ../ sequences in paths
- Failed authentication attempts followed by file access requests
Network Indicators:
- HTTP requests containing ../ sequences in URLs or parameters
- Unusual traffic to CloudPanel management port (default 8443)
SIEM Query:
source="cloudpanel.log" AND ("../" OR "..\\" OR "%2e%2e%2f")🔗 References
- http://packetstormsecurity.com/files/172768/CloudPanel-2.2.2-Privilege-Escalation-Path-Traversal.html
- https://cwe.mitre.org/data/definitions/264.html
- https://cwe.mitre.org/data/definitions/269.html
- https://cwe.mitre.org/data/definitions/35.html
- https://github.com/EagleTube/CloudPanel
- https://www.cloudpanel.io/docs/v2/changelog/
- http://packetstormsecurity.com/files/172768/CloudPanel-2.2.2-Privilege-Escalation-Path-Traversal.html
- https://cwe.mitre.org/data/definitions/264.html
- https://cwe.mitre.org/data/definitions/269.html
- https://cwe.mitre.org/data/definitions/35.html
- https://github.com/EagleTube/CloudPanel
- https://www.cloudpanel.io/docs/v2/changelog/
