Skip to content

OpenStack Swift Unchecked user input in XML responses

High severity GitHub Reviewed Published May 14, 2022 to the GitHub Advisory Database • Updated May 14, 2024

Package

pip swift (pip)

Affected versions

< 1.9.0

Patched versions

1.9.0

Description

XML injection vulnerability in account/utils.py in OpenStack Swift Folsom, Grizzly, and Havana allows attackers to trigger invalid or spoofed Swift responses via an account name.

References

Published by the National Vulnerability Database Aug 20, 2013
Published to the GitHub Advisory Database May 14, 2022
Reviewed May 14, 2024
Last updated May 14, 2024

Severity

High

EPSS score

Exploit Prediction Scoring System (EPSS)

This score estimates the probability of this vulnerability being exploited within the next 30 days. Data provided by FIRST.
(72nd percentile)

Weaknesses

CVE ID

CVE-2013-2161

GHSA ID

GHSA-9xgv-6v35-mmcj

Source code

Loading Checking history
See something to contribute? Suggest improvements for this vulnerability.