Vesta Control Panel - Forum

First of all, there was no reports about hacks on 0.9.8-20.
Please update your servers as soon as possible.


For those who are interested in technical details here is how authentication model looked like in previous releases:
- PHP script /api/index.php receives user password via POST request ...

https://forum.vestacp.com/viewtopic.php?f=25&p=69296#p69296


Any chance of a proper statement being released on how this patch fixes the vulnerability? Were any specific (confirmed) details collected on the attack vector?

All I really saw was a lot of speculation on what the problem COULD be ...