CVE:CVE-2021-28379
CNNVD:CNNVD-202103-959
Vesta Control Panel（VestaCP）是一个开源的虚拟主机控制面板。
Vesta Control Panel  0.9.8-27版本及之前版本存在代码问题漏洞，该漏洞源于web upload UploadHandler.php 允许从不同的来源上传。
solution:Upgrade myvestacp myvesta to a higher version than 0.9.8-26-39,and avoid the version (,0.9.8-26-39]; Upgrade vestacp vesta_control_panel to a higher version than 0.9.8-27,and avoid the version (,0.9.8-27]