CVE-2013-2161
OpenStack Swift Unchecked user input in XML responses
EPSS 0.33%
Description
XML injection vulnerability in account/utils.py in OpenStack Swift Folsom, Grizzly, and Havana allows attackers to trigger invalid or spoofed Swift responses via an account name.
How to fix CVE-2013-2161
To remediate CVE-2013-2161, upgrade the affected package to a fixed version below.
- Debian/swift—upgrade to 1.8.0-6 or later
- Debian/swift—upgrade to 1.4.8-2+deb7u1 or later
- PyPI/swift—upgrade to 1.9.0 or later
Is CVE-2013-2161 being exploited?
Low — EPSS is 0.3%, meaning exploitation activity has not been observed at scale.
Affected packages (3)
- from 0, < 1.8.0-6
- from 0, < 1.4.8-2+deb7u1
- from 0, < 1.9.0