Security Advisory

CVE-2022-31358

CVE vulnerability detail — eXtreme Datacenter Security Operations

Published 2022-12-14 00:00:00
Last updated 2025-04-22 16:07:44
Assigner mitre
State PUBLISHED

Description

A reflected cross-site scripting (XSS) vulnerability in Proxmox Virtual Environment prior to v7.2-3 allows remote attackers to execute arbitrary web scripts or HTML via non-existent endpoints under path /api2/html/.