Plesk APS Catalog XPath Injection Vulnerability Allowing Local Privilege Escalation

An XPath injection vulnerability has been identified in Plesk's APS Application Catalog search feature. This issue arises because user input is incorporated into XPath queries without adequate sanitization. As a result, an authenticated, low-privileged user could execute arbitrary operating system commands on the server, leading to local privilege escalation.

Impact

Exploitation of this vulnerability allows for local privilege escalation on the affected server.

Remediation

Plesk has released fixed versions 18.0.76.2 and 18.0.75.1. Users should update Plesk to these versions. If an immediate upgrade is not possible, as a temporary workaround, disable the APS application catalog by adding 'enabled = off' under the '[aps]' section in the '/usr/local/psa/admin/conf/panel.ini' file.