cPanel before 68.0.15 allows arbitrary file-read operations via Exim vdomainaliases (SEC-329).Referenceshttps://documentation.cpanel.net/display/CL/68+Change+Log
