Skip to content
CVE PROGRAM SOURCE RECORD4.4 Medium

CVE-2025-24832

Arbitrary file overwrite during home directory recovery due to improper symbolic link handling. The following products are affected: Acronis Backup plugin for cPanel & WHM (Linux)

Read JSON ↗CVE.org ↗
Status
Published
Published
Updated
Assigning organization
Acronis

Description

Arbitrary file overwrite during home directory recovery due to improper symbolic link handling. The following products are affected: Acronis Backup plugin for cPanel & WHM (Linux) before build 1.8.4.866, Acronis Backup plugin for cPanel & WHM (Linux) before build 1.9.1.892, Acronis Backup extension for Plesk (Linux) before build 1.8.7.615.

Affected products

Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.

Acronis Acronis Backup plugin for cPanel & WHM

Default version status: unaffected

  • unspecified to < 1.8.4.866affected

Acronis Acronis Backup plugin for cPanel & WHM

Default version status: unaffected

  • unspecified to < 1.9.1.892affected

Acronis Acronis Backup extension for Plesk

Default version status: unaffected

  • unspecified to < 1.8.7.615affected

References