CVE-2022-35507

creationtimestamp| type| source ---|---|--- 2022-12-04 22:39:04+00:00| seen| https://t.me/cibsecurity/53962 2025-04-22 21:02:25+00:00| seen| https://bsky.app/profile/beikokucyber.bsky.social/post/3lnglalpc5o27...

CVE-2022-35507

Proxmox VE/PMG web interfaces are affected by a response-header CRLF injection in pve-http-server. An attacker can cause a client-side DoS by injecting CRLF into response headers to set cookies longer than the server expects, notably affecting Chromium-based browsers using %0d. Affected versions ...

CVE-2022-35507

A response-header CRLF injection vulnerability in the Proxmox Virtual Environment PVE and Proxmox Mail Gateway PMG web interface allows a remote attacker to set cookies for a victim's browser that are longer than the server expects, causing a client-side DoS. This affects Chromium-based browsers...