CVE-2024-5960

CVE-2024-5960 describes a critical vulnerability in Eliz Software Panel versions prior to 2.3.24, where passwords are stored in plaintext, allowing for the use of known domain credentials. This flaw carries a CVSS score of 9.8, indicating a severe risk due to its network-based attack vector, low complexity, and high impact on confidentiality, integrity, and availability. While no public exploits, Metasploit modules, or Nuclei templates are currently available, and there's no evidence of active exploitation or significant community discussion, the vulnerability's nature makes it a high-priority concern for affected organizations.