CGI application can be executed even though CGI support is disabled

Created:

2016-11-16 12:50:46 UTC

Modified:

2017-08-16 17:21:05 UTC

0

Was this article helpful?


Have more questions?

Submit a request

CGI application can be executed even though CGI support is disabled

Applicable to:

  • Plesk 12.5 for Linux

Symptoms

CGI applications can be executed via .htaccess if CGI support is disabled

Cause

Basically, this behavior does not lead to system vulnerability since CGI applications are executed on behalf of subscription system user. The issue was caused by internal issue with id # PPPM-4770 .

Resolution

There is no available workaround yet.

Have more questions? Submit a request
Please sign in to leave a comment.