XML injection vulnerability in account/utils.py in OpenStack Swift Folsom, Grizzly, and Havana allows attackers to trigger invalid or spoofed Swift responses via an account name.
CVSS Details
- CVSS 3.1 Base Score: 9.1
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Debian | — | Upgrade swift | Jul 30, 2024 | Aug 20, 2013 |
| Suse | — | Upgrade openstack-swift-accountUpgrade openstack-swiftUpgrade openstack-swift-docUpgrade python-swiftUpgrade openstack-swift-objectUpgrade openstack-swift-containerUpgrade openstack-swift-proxyUpgrade openstack-swift-test | Dec 12, 2013 | Aug 20, 2013 |
| Ubuntu | — | Upgrade python-swift | Nov 8, 2024 | Aug 20, 2013 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub