CVE-2025-66430

Description

References

• docs.plesk.com/release-notes/obsidian/whats-new · Product
• support.plesk.com/hc/en-us/articles/36261922405015--CVE-2025-66430-Security-vulnerability-in-Password-Protected-Directories-allows-Plesk-users-to-gain-root-level-access-to-a-Plesk-server · Vendor Advisory

Autres vulnérabilités de plesk

• CVE-2023-4931ÉLEVÉE 7.8Uncontrolled search path element vulnerability in Plesk Installer affects version 3.27.0.0. A local attacker could execute arbitrary code by…
• CVE-2023-0829CRITIQUE 9.0Plesk 17.0 through 18.0.31 version, is vulnerable to a Cross-Site Scripting. A malicious subscription owner (either a customer or an additio…
• CVE-2021-45008ÉLEVÉE 8.8Plesk CMS 18.0.37 is affected by an insecure permissions vulnerability that allows privilege Escalation from user to admin rights. OTE: the …
• CVE-2021-45007MOYENNE 6.5Plesk 18.0.37 is affected by a Cross Site Request Forgery (CSRF) vulnerability that allows an attacker to insert data on the user and admin …