OpenStack Swift Unchecked user input in XML responses

HIGH 7.5CVE-2013-2161 · GHSA-9xgv-6v35-mmcj · PYSEC-2026-930 · Published 20/08/2013 · updated 16/06/2026

Package	Affected versions	Patched versions
swift PyPI	`< 1.9.0`	`1.9.0`

Description

XML injection vulnerability in account/utils.py in OpenStack Swift Folsom, Grizzly, and Havana allows attackers to trigger invalid or spoofed Swift responses via an account name.

NVD description

XML injection vulnerability in account/utils.py in OpenStack Swift Folsom, Grizzly, and Havana allows attackers to trigger invalid or spoofed Swift responses via an account name.

References

nvd.nist.gov/vuln/detail/CVE-2013-2161 · ADVISORY
openstack/swift commit 6659382 · WEB
openstack/swift commit 8f9b135 · WEB
bugs.launchpad.net/swift/+bug/1183884 · WEB
openstack/swift · PACKAGE
openstack/swift commit 4eed6bf · WEB
openstack/swift commit 92d7ead · WEB
lists.opensuse.org/opensuse-updates/2013-07/msg00021.html · WEB
rhn.redhat.com/errata/RHSA-2013-0993.html · WEB
debian.org/security/2012/dsa-2737 · WEB
openwall.com/lists/oss-security/2013/06/13/4 · WEB
pypi.org/project/swift · PACKAGE
GitHub Advisory GHSA-9xgv-6v35-mmcj · ADVISORY

Running one of these products? Scan your site to see whether it exposes a vulnerable version.

Scan my site free