CVE-2014-3497

Currently unrated

Key Information:

Vendor
Openstack
Status
Swift
Vendor
CVE Published:
3 July 2014

Summary

Cross-site scripting (XSS) vulnerability in OpenStack Swift 1.11.0 through 1.13.1 allows remote attackers to inject arbitrary web script or HTML via the WWW-Authenticate header.

References

http://www.ubuntu.com/usn/USN-2256-1
vendor-advisoryx_refsource_UBUNTU
http://secunia.com/advisories/59532
third-party-advisoryx_refsource_SECUNIA
https://review.openstack.org/#/c/101031/
x_refsource_CONFIRM

Timeline

  • Vulnerability published

  • Vulnerability Reserved

.