CVE-2024-31144

Xapi contains a metadata injection vulnerability in its backup and restore functionality. The system retrieves metadata from Virtual Disk Images (VDIs) by searching for the first match in alphanumeric UUID order. Because the host does not trust VDI content, a malicious guest can manipulate its ow...