Description
A Host Header Injection issue on the Login page of Plesk Obsidian through 18.0.49 allows attackers to redirect users to malicious websites via a Host request header.
Remediation
References
Related Vulnerabilities
WordPress Permissions, Privileges, and Access Controls Vulnerability (CVE-2010-5293)
Chamilo Missing Authorization Vulnerability (CVE-2019-1000017)
WebLogic CVE-2019-2452 Vulnerability (CVE-2019-2452)
WordPress 4.4.x Multiple Vulnerabilities (4.4 - 4.4.29)
WordPress Plugin Instagram Plugin-InstaLinker Cross-Site Scripting (1.1.1)