Goal Reached Thanks to every supporter — we hit 100%!

Goal: 1000 CNY · Raised: 1310 CNY

100%
Buy Us a Coffee

CVE-2022-45130

EPSS 0.61% · P70
Get alerts for future matching vulnerabilitiesLog in to subscribe

I. Basic Information for CVE-2022-45130

Vulnerability Information
Have questions about the vulnerability? See if Shenlong's analysis helps!
View Shenlong Deep Dive ↗

Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.

Vulnerability Title
N/A
Source: NVD (National Vulnerability Database)
Vulnerability Description
Plesk Obsidian allows a CSRF attack, e.g., via the /api/v2/cli/commands REST API to change an Admin password. NOTE: Obsidian is a specific version of the Plesk product: version numbers were used through version 12, and then the convention was changed so that versions are identified by names ("Obsidian"), not numbers.
Source: NVD (National Vulnerability Database)
CVSS Information
N/A
Source: NVD (National Vulnerability Database)
Vulnerability Type
N/A
Source: NVD (National Vulnerability Database)
Vulnerability Title
Plesk Obsidian 跨站请求伪造漏洞
Source: CNNVD (China National Vulnerability Database)
Vulnerability Description
Plesk Obsidian是瑞士Plesk公司的一款主机控制面板。 Plesk Obsidian存在安全漏洞。攻击者利用该漏洞通过/api/v2/cli/commands REST API更改管理员密码。
Source: CNNVD (China National Vulnerability Database)
CVSS Information
N/A
Source: CNNVD (China National Vulnerability Database)
Vulnerability Type
N/A
Source: CNNVD (China National Vulnerability Database)

Affected Products

VendorProductAffected VersionsCPESubscribe
-n/a n/a -

II. Public POCs for CVE-2022-45130

#POC DescriptionSource LinkShenlong Link
AI-Generated POCPremium

No public POC found.

Login to generate AI POC

III. Intelligence Information for CVE-2022-45130

请登录查看更多情报信息。

Other References for CVE-2022-45130 (1)

Same Patch Batch · n/a · 2022-11-10 · 14 CVEs total

CVE-2021-01857.5 HIGHIntel Server Board M10JNP Family 输入验证错误漏洞
CVE-2022-436794.2 MEDIUMownCloud 安全漏洞
CVE-2021-40226XpdfReader 缓冲区错误漏洞
CVE-2021-40289MM-Wiki 跨站脚本漏洞
CVE-2022-26088BMC Software BMC Remedy 跨站脚本漏洞
CVE-2022-35740dotCMS 跨站脚本漏洞
CVE-2022-43074AyaCMS 代码问题漏洞
CVE-2022-44087EARCLINK ESPCMS 安全漏洞
CVE-2022-44088EARCLINK ESPCMS 安全漏洞
CVE-2022-44089EARCLINK ESPCMS 安全漏洞
CVE-2022-44727PrestaShop SQL注入漏洞
CVE-2022-45063Xterm 命令注入漏洞
CVE-2022-45129Payara Server 路径遍历漏洞

IV. Related Vulnerabilities

Same product: n/a
Same vendor: n/a

V. Comments for CVE-2022-45130

No comments yet

Leave a comment