CVE-2023-46818

Name of the Vulnerable Software and Affected Versions ISPConfig versions prior to 3.2.11p1

Description An issue was discovered that allows PHP code injection in the language file editor by an admin if admin allow langedit is enabled. This issue can be exploited to achieve PHP code injection.

Recommendations For versions prior to 3.2.11p1, update to version 3.2.11p1 or later to resolve the issue. As a temporary workaround, consider disabling the language file editor or restricting the admin allow langedit setting until a patch is applied.