{"id":"CVE-2024-34014","aliases":["EUVD-2024-34586","GHSA-6c9g-ghq5-c4c8"],"status":"published","title":"Arbitrary file overwrite during recovery due to improper soft link handling. The following...","description":"Arbitrary file overwrite during recovery due to improper symbolic link handling. The following products are affected: Acronis Backup plugin for cPanel \u0026 WHM (Linux) before build 1.8.3.818, Acronis Backup plugin for cPanel \u0026 WHM (Linux) before build 1.9.1.892, Acronis Backup extension for Plesk (Linux) before build 1.8.6.599, Acronis Backup plugin for DirectAdmin (Linux) before build 1.2.2.181.","severity":{"version":"3.0","score":5.5,"vector":"CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:N","level":"medium","assessor":"cna","from":"cve"},"epss":{"day":"2026-11-09","score":0.00199,"percentile":0.09751,"model":"v2026.06.15"},"facts":{"in_kev":false,"known_exploited":false,"public_exploit":false,"fix_available":false},"cwes":["CWE-61"],"published":"2024-11-11T13:20:33Z","modified":"2026-06-17T07:32:44Z","products":[{"vendor":"acronis","product":"acronis backup extension for plesk"},{"vendor":"acronis","product":"acronis backup plugin for cpanel \u0026 whm"},{"vendor":"acronis","product":"acronis backup plugin for directadmin"}],"references":[{"url":"https://security-advisory.acronis.com/advisories/SEC-7592","tags":["vendor-advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2024-34014"},{"url":"https://github.com/advisories/GHSA-6c9g-ghq5-c4c8"}],"sources":{"cve":[{"id":"CVE-2024-34014","description":"Arbitrary file overwrite during recovery due to improper symbolic link handling. The following products are affected: Acronis Backup plugin for cPanel \u0026 WHM (Linux) before build 1.8.3.818, Acronis Backup plugin for cPanel \u0026 WHM (Linux) before build 1.9.1.892, Acronis Backup extension for Plesk (Linux) before build 1.8.6.599, Acronis Backup plugin for DirectAdmin (Linux) before build 1.2.2.181.","status":"published","published":"2024-11-11T13:20:33.777Z","modified":"2025-02-27T22:59:35.05Z","cvss":[{"version":"3.0","score":5.5,"vector":"CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:N","level":"medium","assessor":"cna"}],"cwes":["CWE-61"],"updated_at":"2026-11-02T14:34:23.516065Z"}],"euvd":[{"id":"EUVD-2024-34586","description":"Arbitrary file overwrite during recovery due to improper symbolic link handling. The following products are affected: Acronis Backup plugin for cPanel \u0026 WHM (Linux) before build 1.8.3.818, Acronis Backup plugin for cPanel \u0026 WHM (Linux) before build 1.9.1.892, Acronis Backup extension for Plesk (Linux) before build 1.8.6.599, Acronis Backup plugin for DirectAdmin (Linux) before build 1.2.2.181.","status":"published","published":"2024-11-11T13:20:33Z","modified":"2025-02-27T22:59:35Z","cvss":[{"version":"3.0","score":5.5,"vector":"CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:N","level":"medium"}],"updated_at":"2026-11-02T20:53:20.548403Z"}],"ghsa":[{"id":"GHSA-6c9g-ghq5-c4c8","title":"Arbitrary file overwrite during recovery due to improper soft link handling. The following...","description":"Arbitrary file overwrite during recovery due to improper soft link handling. The following products are affected: Acronis Backup plugin for cPanel \u0026 WHM (Linux) before build 818, Acronis Backup extension for Plesk (Linux) before build 599, Acronis Backup plugin for DirectAdmin (Linux) before build 181.","status":"published","published":"2024-11-11T15:31:01Z","modified":"2024-11-11T15:31:02Z","cvss":[{"version":"3.0","score":5.5,"vector":"CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:N","level":"medium"}],"cwes":["CWE-61"],"updated_at":"2026-11-02T14:58:46.999726Z"}],"nvd":[{"id":"CVE-2024-34014","description":"Arbitrary file overwrite during recovery due to improper symbolic link handling. The following products are affected: Acronis Backup plugin for cPanel \u0026 WHM (Linux) before build 1.8.3.818, Acronis Backup plugin for cPanel \u0026 WHM (Linux) before build 1.9.1.892, Acronis Backup extension for Plesk (Linux) before build 1.8.6.599, Acronis Backup plugin for DirectAdmin (Linux) before build 1.2.2.181.","status":"published","published":"2024-11-11T14:15:14.693Z","modified":"2026-06-17T07:32:44.94Z","cvss":[{"version":"3.0","score":5.5,"vector":"CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:N","level":"medium","assessor":"secondary"}],"cwes":["CWE-61"],"updated_at":"2026-11-02T14:10:36.931115Z"}]}}