CVE-2013-2161

Currently unrated

Key Information:

Vendor
Openstack
Status
Havana
Opensuse
Grizzly
Folsom
Vendor
CVE Published:
20 August 2013

Summary

XML injection vulnerability in account/utils.py in OpenStack Swift Folsom, Grizzly, and Havana allows attackers to trigger invalid or spoofed Swift responses via an account name.

References

http://www.debian.org/security/2012/dsa-2737
vendor-advisoryx_refsource_DEBIAN
http://lists.opensuse.org/opensuse-updates/2013-07/msg000...
vendor-advisoryx_refsource_SUSE
https://bugs.launchpad.net/swift/+bug/1183884
x_refsource_CONFIRM

Timeline

  • Vulnerability published

  • Vulnerability Reserved

.