MSRXMSRXSecurity
Vulnerabilities / CVE-2025-24832

CVE-2025-24832

Published 2025-02-27 · published (not yet in NVD)

CVE-2025-24832

4.4 MEDIUM
CVSS 3.0 · CNA
0.2%
chance of exploitation in the next 30 days (EPSS; higher than 9% of CVEs)

Arbitrary file overwrite during home directory recovery due to improper symbolic link handling. The following products are affected: Acronis Backup plugin for cPanel & WHM (Linux) before build 1.8.4.866, Acronis Backup plugin for cPanel & WHM (Linux) before build 1.9.1.892, Acronis Backup extension for Plesk (Linux) before build 1.8.7.615.

Scores

4.4CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:NCNA

Affected products

  • Acronis Acronis Backup plugin for cPanel & WHM: unspecified to < 1.8.4.866
  • Acronis Acronis Backup plugin for cPanel & WHM: unspecified to < 1.9.1.892
  • Acronis Acronis Backup extension for Plesk: unspecified to < 1.8.7.615

Weakness: CWE-61

1 references (advisories, patches, write-ups)

Sources: CVE.org, FIRST EPSS. Missing ones did not answer or have no record yet.

Look up another CVECheck your dependenciesScan a website