CVE-2024-31144

The Xapi component in Xen is vulnerable to a metadata injection attack during backup and restore operations. The vulnerability occurs because the host administrator's system searches for and mounts Virtual Disk Images (VDIs) in alphanumeric order by UUID to locate metadata. Since a malicious gues...