pentester.land· Nov 8, 2022· by Adrian Tiron (@Adrian__T)

Compromising Plesk Via Its REST API

Target Program: Plesk

🎯 Vulnerability: Web Security Vulnerability

💡 Defense Fix: Implement strict input validation, contextual output encoding, and enforce least-privilege authorization controls.

#CORS misconfiguration#CSRF