Vendor/product archive

proxmox / pve_http_server CVEs

Beta · best-effort

2 CVEs tagged to proxmox / pve_http_server — 1 Critical, 1 High, 0 Medium, 0 Low, 0 Unrated.

See this archive with more filters Back to proxmox vendor archive

CVE-2022-35508

Published Dec 4, 2022

Proxmox Virtual Environment (PVE) and Proxmox Mail Gateway (PMG) are vulnerable to SSRF when proxying HTTP requests between pve(pmg)proxy and pve(pmg)daemon. An attacker with an u…

CVSS 9.8 · Critical

Vendor/product tagsBeta · best-effort

CVE-2022-35507

Published Dec 4, 2022

A response-header CRLF injection vulnerability in the Proxmox Virtual Environment (PVE) and Proxmox Mail Gateway (PMG) web interface allows a remote attacker to set cookies for a…

CVSS 7.1 · High

Vendor/product tagsBeta · best-effort

Showing 1-2 of 2 CVEsPage 1 of 1