Plesk Obsidian 18.0.17

CPE Details

Plesk Obsidian 18.0.17
plesk
obsidian
18.0.17
2020-08-04
14h45 +00:00
2020-08-04
14h45 +00:00
CPE NVD
Alerte pour un CPE
Stay informed of any changes for a specific CPE.
Notifications manage

CPE Name: cpe:2.3:a:plesk:obsidian:18.0.17:*:*:*:*:*:*:*

Informations

Vendor

plesk

Product

obsidian

Version

18.0.17

Related CVE

Open and find in CVE List

CVE ID Published Description Score Severity
CVE-2023-24044 2023-01-21 23h00 +00:00 A Host Header Injection issue on the Login page of Plesk Obsidian through 18.0.49 allows attackers to redirect users to malicious websites via a Host request header. NOTE: the vendor's position is "the ability to use arbitrary domain names to access the panel is an intended feature."
6.1
Medium
CVE-2021-35976 2021-09-10 09h08 +00:00 The feature to preview a website in Plesk Obsidian 18.0.0 through 18.0.32 on Linux is vulnerable to reflected XSS via the /plesk-site-preview/ PATH, aka PFSI-62467. The attacker could execute JavaScript code in the victim's browser by using the link to preview sites hosted on the server. Authentication is not required to exploit the vulnerability.
6.1
Medium
CVE-2020-11583 2020-08-03 18h12 +00:00 A GET-based XSS reflected vulnerability in Plesk Obsidian 18.0.17 allows remote unauthenticated users to inject arbitrary JavaScript, HTML, or CSS via a GET parameter.
6.1
Medium