Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

github логотип

GHSA-29pr-6qrg-q2x4

Опубликовано: 06 июл. 2026
Источник: github
Github: Не прошло ревью
CVSS3: 9.9

Описание

An improper authorization vulnerability in the Plesk XML API allows an authenticated user to inject arbitrary configuration directives, resulting in arbitrary file write as root and full privilege escalation on the underlying server.

An improper authorization vulnerability in the Plesk XML API allows an authenticated user to inject arbitrary configuration directives, resulting in arbitrary file write as root and full privilege escalation on the underlying server.

EPSS

Процентиль: 25%
0.0033
Низкий

9.9 Critical

CVSS3

Дефекты

CWE-94

Связанные уязвимости

CVSS3: 9.9
redhat
24 дня назад

An improper authorization vulnerability in the Plesk XML API allows an authenticated user to inject arbitrary configuration directives, resulting in arbitrary file write as root and full privilege escalation on the underlying server.

CVSS3: 9.9
nvd
24 дня назад

An improper authorization vulnerability in the Plesk XML API allows an authenticated user to inject arbitrary configuration directives, resulting in arbitrary file write as root and full privilege escalation on the underlying server.

EPSS

Процентиль: 25%
0.0033
Низкий

9.9 Critical

CVSS3

Дефекты

CWE-94