CVE-2025-57539: XSS
A stored cross-site scripting (XSS) vulnerability in the U2F Origin field of the Datacenter configuration in Proxmox Virtual Environment (PVE) 8.4 allows authenticated users to store malicious input. The payload is rendered unsafely in the Web UI and executed when viewed by other users, potentially leading to session hijacking or other attacks.
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2025-57539?
CVE-2025-57539 is classified as a stored cross-site scripting (XSS) vulnerability, which can result in significant security risks.
How do I fix CVE-2025-57539?
To mitigate CVE-2025-57539, ensure that Proxmox Virtual Environment is updated to the latest version where this vulnerability is addressed.
Who is affected by CVE-2025-57539?
Authenticated users of Proxmox Virtual Environment (PVE) 8.4 are potentially affected by CVE-2025-57539.
What type of attacks can CVE-2025-57539 facilitate?
CVE-2025-57539 can facilitate stored cross-site scripting (XSS) attacks that execute malicious scripts when viewed by other users.
What component of Proxmox Virtual Environment does CVE-2025-57539 affect?
CVE-2025-57539 affects the U2F Origin field within the Datacenter configuration of Proxmox Virtual Environment.