diff --git a/modules/exploits/unix/webapp/cyberpanel_preauth_rce_multi_cve.rb b/modules/exploits/unix/webapp/cyberpanel_preauth_rce_multi_cve.rb
index e7bad4e2bb54..32c3a6acc7a0 100644
--- a/modules/exploits/unix/webapp/cyberpanel_preauth_rce_multi_cve.rb
+++ b/modules/exploits/unix/webapp/cyberpanel_preauth_rce_multi_cve.rb
@@ -148,7 +148,7 @@ def execute_payload(action, injected_payload)
       payload_data = post_data.to_s
 
       headers['X-CSRFToken'] = csrf_token
-      headers['Referer'] = "#{(datastore['SSL'] ? 'https' : 'http')}://#{datastore['RHOST']}:#{datastore['RPORT']}#{normalize_uri(target_uri.path, 'filemanager/upload')}"
+      headers['Referer'] = "#{datastore['SSL'] ? 'https' : 'http'}://#{datastore['RHOST']}:#{datastore['RPORT']}#{normalize_uri(target_uri.path, 'filemanager/upload')}"
       headers['Cookie'] = "csrftoken=#{csrf_token}"
       ctype = "multipart/form-data; boundary=#{post_data.bound}"