cPanel prior to 60.0.25 allows malicious users to discover file contents during file copy operations (SEC-185).
cpanel cpanel