stored XSS in config values
Affected packages
proxmox-backup-server
Details
The WebAuthN setting dialogue in the web interface was susceptible to XSS. Editing these settings requires root privileges.
A related issue in the Proxmox VE code base was discovered and reported by Javidan Khankishiyev <[email protected]>.
Fixed in
- proxmox-backup-server >= 4.0.14-1 (PBS 4.x)
- proxmox-backup-server >= 3.4.6-1 (PBS 3.x)
This page is an unofficial copy of the official Proxmox forum post (opens in a new tab). Always check the original before acting.