CVE-2013-1070
EUVD-2013-111017.02.2014, 16:55
Cross-site scripting (XSS) vulnerability in the API in Ubuntu Metal as a Service (MaaS) 1.2 and 1.4 allows remote attackers to inject arbitrary web script or HTML via the op parameter to nodes/.
Affected Products (NVD)
| Vendor | Product | Version |
|---|---|---|
| ubuntu | metal_as_a_service | 1.2 |
| ubuntu | metal_as_a_service | 1.4 |
𝑥
= Vulnerable software versions
Ubuntu Releases