CVE-2022-35507

A response-header CRLF injection vulnerability in the Proxmox Virtual Environment (PVE) and Proxmox Mail Gateway (PMG) web interface allows a remote attacker to set cookies for a victim's browser that are longer than the server expects, causing a client-side DoS. This affects Chromium-based browsers because they allow injection of response headers with %0d. This is fixed in pve-http-server 4.1-3.

CVSS v3.1

7.1 HIGHCVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:H

CVSS v3.1

4.3 MEDIUMCVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:N

EPSS

1.39% chance of exploitation in the next 30 days, 70th percentile

Nuclei

high · CWE-74

Published

2022-12-04

Updated

2025-04-24

Nuclei templates (1)

• projectdiscovery/nuclei-templates/blob/main/http/cves/2022/CVE-2022-35507.yaml

References

• CVE Record
• NVD entry

Related

• CVE-2022-35506
• CVE-2022-35513
• CVE-2022-35505
• CVE-2022-35516
• CVE-2022-35501
• CVE-2022-35517