Beveiligingsadvies

CVE-2014-4301

CVE-kwetsbaarheidsdetails - eXtreme Datacenter Security Operations

Gepubliceerd 2014-06-18 14:00:00
Laatst bijgewerkt 2024-08-06 11:12:34
Toegewezen door mitre
CVSS-score geen score
Status PUBLISHED

Beschrijving

Multiple cross-site scripting (XSS) vulnerabilities in the respond_error function in routing.py in Eugene Pankov Ajenti before 1.2.21.7 allow remote attackers to inject arbitrary web script or HTML via the PATH_INFO to (1) resources.js or (2) resources.css in ajenti:static/, related to the traceback page.