CVE-2023-43784

—

CVSS 3.1

7.5 high

EPSS

<1%p39

Published

Sep 22, 2023 (Sep 22, 2023)

Modified

Jun 17, 2026

Description

Plesk Onyx 17.8.11 has accessKeyId and secretAccessKey fields that are related to an Amazon AWS Firehose component. NOTE: the vendor's position is that there is no security threat.

Vendors: plesk
Products: onyx
Weakness: CWE-668
Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N

NVD CVE.org GitHub PoCs EPSS (0.5%)

In the news0 stories

No ingested article mentions this CVE yet.