GitHub Advisoryadvisory · PyPI

GHSA-9xgv-6v35-mmcj OpenStack Swift Unchecked user input in XML responses

HIGH Published 2022-05-14 Modified 2024-05-14 Official page ↗
Aliases
CVE-2013-2161
Ecosystem
PyPI
Packages
swift
Severity
High
Weaknesses
CWE-94
Reviewed
2024-05-14

Affected packages

• PyPI swift: < 1.9.0 → fixed in 1.9.0

Description

XML injection vulnerability in account/utils.py in OpenStack Swift Folsom, Grizzly, and Havana allows attackers to trigger invalid or spoofed Swift responses via an account name.

Related

Alias · CVE (1)

  • CVE-2013-2161 XML injection vulnerability in account/utils.py in OpenStack Swift Folsom, Grizzly, and Havana allows attackers to trigger invalid or… vulnerability

Weakness · CWE (1)

  • CWE-94 Improper Control of Generation of Code weakness

References