Skip to content
OpenAdvisories
Medium · 4.4 CVE-2025-24832 EUVD-2025-5492GHSA-qc2q-hwc8-26rv

Arbitrary file overwrite during home directory recovery due to improper symbolic link handling. The following products are affected: Acroni…

Published Feb 27, 2025 · Updated Feb 28, 2025 · Assigned by Acronis

Description

Arbitrary file overwrite during home directory recovery due to improper symbolic link handling. The following products are affected: Acronis Backup plugin for cPanel & WHM (Linux) before build 1.8.4.866, Acronis Backup plugin for cPanel & WHM (Linux) before build 1.9.1.892, Acronis Backup extension for Plesk (Linux) before build 1.8.7.615.

Affected products

VendorProductAffectedFixed
Acronis Acronis Backup plugin for cPanel & WHM unspecified – < 1.8.4.866, unspecified – < 1.9.1.892 1.8.4.866
Acronis Acronis Backup extension for Plesk unspecified – < 1.8.7.615 1.8.7.615

References