writeups.xyz / Multiple Vulnerabilities in Proxmox VE & Proxmox Mail Gateway

Submitter : c2a

Date: 2 December 2022

Bounty : undisclosed

Vulnerabilities :

• XSS
• CRLF Injection
• SSRF
• LFI
• Local Privilege Escalation
• Arbitrary File Read

Programs :

• Proxmox

Authors :

• JianTao Li (@Cursered)

Link :
https://starlabs.sg/blog/2022/12-multiple-vulnerabilites-in-proxmox-ve--proxmox-mail-gateway/