CVE-2023-24044 (published 2023-01-22T00:00:00)
A Host Header Injection issue on the Login page of Plesk Obsidian through 18.0.49 allows attackers to redirect users to malicious websites via a Host request header. NOTE: the vendor's position is "the ability to use arbitrary domain names to access the panel is an intended feature."
Affected products: Vendor: n/a
Product: n/a
Versions: n/a