CVE-2025-24832 - Overview, Insights & Trends

CVE-2025-24832

Published Feb 27, 2025

Last updated a month ago

Overview

Description
Arbitrary file overwrite during home directory recovery due to improper symbolic link handling. The following products are affected: Acronis Backup plugin for cPanel & WHM (Linux) before build 1.8.4.866, Acronis Backup plugin for cPanel & WHM (Linux) before build 1.9.1.892, Acronis Backup extension for Plesk (Linux) before build 1.8.7.615.
Source
security@acronis.com
NVD status
Received

Risk scores

CVSS 3.0

Type
Secondary
Base score
5.5
Impact score
3.6
Exploitability score
1.8
Vector string
CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:N
Severity
MEDIUM

Weaknesses

security@acronis.com
CWE-61

Social media

Hype score
Not currently trending