ESXi importer: path traversal in vmx parser
Affected packages
libpve-storage-perl
Details
Incomplete path validation in the ESXi importer allowed an attacker with access to a configured ESXi instance with privileges to trigger imports to leak arbitrary file contents of paths ending in .vmx.
This issue was reported privately by Ibrahim Aljaafreh from Cystack RedTeam.
Fixed in
- libpve-storage-perl >= 9.1.12
This page is an unofficial copy of the official Proxmox forum post (opens in a new tab). Always check the original before acting.