UpHeron
All vulnerabilities

Servers and applications

CVE-2021-27231

Hestia Control Panel 1.3.5 and below, in a shared-hosting environment, sometimes allows remote authenticated users to create a subdomain for a different customer's domain name, leading to spoofing of services or email messages.

Severity
Medium 5.4
Published
16 Feb 2021
Last changed
17 Jun 2026
Added to UpHeron
1 Nov 2026
Sources
NVD

Affected software

SoftwareAffected versions
Hestia Control PanelServers and applications · cpe:a:hestiacp:control_panel
  • Every version up to 1.3.5

References

  • NVD https://nvd.nist.gov/vuln/detail/CVE-2021-27231
  • CVE.org https://www.cve.org/CVERecord?id=CVE-2021-27231