Description
A Host Header Injection issue on the Login page of Plesk Obsidian through 18.0.49 allows attackers to redirect users to malicious websites via a Host request header.
Remediation
References
Related Vulnerabilities
WordPress Plugin Easy Google Fonts Cross-Site Scripting (1.3.6)
MySQL CVE-2016-5440 Vulnerability (CVE-2016-5440)
Oracle JRE Improper Access Control Vulnerability (CVE-2026-47059)
Drupal Improper Input Validation Vulnerability (CVE-2007-6299)
GlassFish Exposure of Sensitive Information to an Unauthorized Actor Vulnerability (CVE-2017-3239)