cPanel before 70.0.23 allows code execution because "." is in @INC during a Perl syntax check of cpaddonsup (SEC-359).Referenceshttps://documentation.cpanel.net/display/CL/70+Change+Log
