cPanel prior to 70.0.23 allows local privilege escalation via the WHM Locale XML Upload interface (SEC-380).
cpanel cpanel