cPanel prior to 55.9999.141 allows arbitrary file-read operations during authentication with caldav (SEC-108).
cpanel cpanel