Vesta Control Panel - Forum

First of all, there was no reports about hacks on 0.9.8-20. Please update your servers as soon as possible. For those who are interested in technical details here is how authentication model looked like in previous releases: - PHP script /api/index.php receives user password via POST request - then...

https://forum.vestacp.com/viewtopic.php?f=25&p=69296#p69296 Any chance of a proper statement being released on how this patch fixes the vulnerability? Were any specific (confirmed) details collected on the attack vector? All I really saw was a lot of speculation on what the problem COULD be, and a ...