writeups.xyz / Compromising Plesk Via Its REST API

Submitter : c2a

Date: 8 November 2022

Bounty : undisclosed

Vulnerabilities :

• CORS Misconfiguration
• CSRF

Programs :

• Plesk

Authors :

• Adrian Tiron (@Adrian__t)

Link :
https://fortbridge.co.uk/research/compromising-plesk-via-its-rest-api/