Vulnerability Information
Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.
Vulnerability Title
N/A
Vulnerability Description
Plesk Obsidian allows a CSRF attack, e.g., via the /api/v2/cli/commands REST API to change an Admin password. NOTE: Obsidian is a specific version of the Plesk product: version numbers were used through version 12, and then the convention was changed so that versions are identified by names ("Obsidian"), not numbers.
CVSS Information
N/A
Vulnerability Type
N/A
Vulnerability Title
Plesk Obsidian 跨站请求伪造漏洞
Vulnerability Description
Plesk Obsidian是瑞士Plesk公司的一款主机控制面板。 Plesk Obsidian存在安全漏洞。攻击者利用该漏洞通过/api/v2/cli/commands REST API更改管理员密码。
CVSS Information
N/A
Vulnerability Type
N/A