How severe is CVE-2018-17984?

CVE-2018-17984 has a CVSS 3.x base score of 7.8, rated high severity. It is exploitable over local access with low attack complexity, requires low privileges and no user interaction. Impact on confidentiality is high, integrity high, and availability high.

Is CVE-2018-17984 being actively exploited?

It is not currently listed in CISA's KEV catalog. Its EPSS exploit-prediction score is 3% (87th percentile), an estimate of the probability of exploitation in the next 30 days.

What products are affected by CVE-2018-17984?

CVE-2018-17984 affects Ispconfig. See the affected-products list for the exact vulnerable versions.

How do I fix CVE-2018-17984?

Review the linked vendor and NVD advisories for patched versions and mitigations, then upgrade or apply the recommended workaround. Given its high severity, prioritise patching exposed systems.

When was CVE-2018-17984 published?

CVE-2018-17984 was published on 2018-10-04 and last updated on 2026-06-17.

CVE-2018-17984

CVE-2018-17984 is a high-severity vulnerability in Ispconfig with a CVSS 3.x base score of 7.8. It is not currently listed as actively exploited by CISA, and its EPSS exploit-prediction score is low. The underlying weakness is classified as CWE-185.

Key facts

Severity: High (CVSS 3.x base score 7.8)
CVSS v2: 4.6
EPSS exploit prediction: 3% (87th percentile)
Actively exploited: Not listed in CISA KEV
Weakness: CWE-185
Affected product: Ispconfig
Published: 2018-10-04
Last modified: 2026-06-17

Description

An unanchored /[a-z]{2}/ regular expression in ISPConfig before 3.1.13 makes it possible to include arbitrary files, leading to code execution. This is exploitable by authenticated users who have local filesystem access.

Frequently asked questions

What is CVE-2018-17984?: An unanchored /[a-z]{2}/ regular expression in ISPConfig before 3.1.13 makes it possible to include arbitrary files, leading to code execution. This is exploitable by authenticated users who have local filesystem access.
How severe is CVE-2018-17984?: CVE-2018-17984 has a CVSS 3.x base score of 7.8, rated high severity. It is exploitable over local access with low attack complexity, requires low privileges and no user interaction. Impact on confidentiality is high, integrity high, and availability high.
Is CVE-2018-17984 being actively exploited?: It is not currently listed in CISA's KEV catalog. Its EPSS exploit-prediction score is 3% (87th percentile), an estimate of the probability of exploitation in the next 30 days.
What products are affected by CVE-2018-17984?: CVE-2018-17984 affects Ispconfig. See the affected-products list for the exact vulnerable versions.
How do I fix CVE-2018-17984?: Review the linked vendor and NVD advisories for patched versions and mitigations, then upgrade or apply the recommended workaround. Given its high severity, prioritise patching exposed systems.
When was CVE-2018-17984 published?: CVE-2018-17984 was published on 2018-10-04 and last updated on 2026-06-17.

References

Affected products (1)

cpe:2.3:a:ispconfig:ispconfig:*:*:*:*:*:*:*:*

More vulnerabilities in Ispconfig

CVE-2021-3021 — Critical (CVSS 9.8): ISPConfig before 3.2.2 allows SQL injection.
CVE-2020-9398 — Critical (CVSS 9.8): ISPConfig before 3.1.15p3, when the undocumented reverse_proxy_panel_allowed=sites option is manually enabled, allows…
CVE-2012-2087 — Critical (CVSS 9.8): ISPConfig 3.0.4.3: the "Add new Webdav user" can chmod and chown entire server from client interface.
CVE-2013-3629 — High (CVSS 8.8): ISPConfig 3.0.5.2 has Arbitrary PHP Code Execution
CVE-2017-17384 — High (CVSS 8.8): ISPConfig 3.x before 3.1.9 allows remote authenticated users to obtain root access by creating a crafted cron job.
CVE-2006-3042 — High (CVSS 7.5): Multiple PHP remote file inclusion vulnerabilities in ISPConfig 2.2.3 allow remote attackers to execute arbitrary PHP…

All CVEs affecting Ispconfig →

Other CWE-185 vulnerabilities

CVE-2024-52289 — Critical (CVSS 9.8): authentik is an open-source identity provider. Redirect URIs in the OAuth2 provider in authentik are checked by RegEx…
CVE-2019-12798 — Critical (CVSS 9.8): An issue was discovered in Artifex MuJS 1.0.5. regcompx in regexp.c does not restrict regular expression program size,…
CVE-2026-25896 — Critical (CVSS 9.3): fast-xml-parser allows users to validate XML, parse XML to JS object, or build XML from JS object without C/C++ based…
CVE-2026-4296 — High (CVSS 8.8): An incorrect regular expression vulnerability was identified in GitHub Enterprise Server that allowed an attacker to…
CVE-2026-33418 — High (CVSS 7.5): DiceBear is an avatar library for designers and developers. Prior to version 9.4.2, the `ensureSize()` function in…
CVE-2025-20139 — High (CVSS 7.5): A vulnerability in chat messaging features of Cisco Enterprise Chat and Email (ECE) could allow an unauthenticated,…

Browse all CWE-185 vulnerabilities →