CVE-2025-49618: Transmission of Private Resources into a New Sphere

In Plesk Obsidian 18.0.69, unauthenticated requests to /loginup.php can reveal an AWS accessKeyId, secretAccessKey, region, and endpoint...