ACME directory ToS URL XSS
Affected packages
proxmox-backup, proxmox-widget-toolkit
Details
The terms of service URL returned by an ACME directory was not escaped properly when displaying it on the web UI. An attacker with privileges to register an ACME account using a custom directory could use this field for an XSS attack.
A related issue that requires root privileges was privately reported by Nguyen Van Thuy <[email protected]> and Luong Huynh Minh Kien <[email protected]> for Proxmox VE.
Fixed in
- proxmox-widget-toolkit >= 5.2.8 (PBS 4.x)
This page is an unofficial copy of the official Proxmox forum post (opens in a new tab). Always check the original before acting.