CVE-2014-1427

Published: Apr 22, 2019Modified: Nov 21, 2024

6.1

Vector

CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N

Exploitability: 2.8 / Impact: 2.7

Source: NVD

Description

A vulnerability in the REST API of Ubuntu MAAS allows an attacker to cause a logged-in user to execute commands via cross-site scripting. This issue affects MAAS versions prior to 1.9.2.

Affected Products (1)

CPE details will appear after the next data sync.

Canonical

1 product

Metal As A Service

References (2)

https://launchpad.net/maas/+milestone/1.9.2

Source: security@ubuntu.com

Third Party Advisory

https://launchpad.net/maas/+milestone/1.9.2

Source: af854a3a-2127-422b-91ae-364da2661108

Third Party Advisory

Timeline

No history available yet.