Ajenti Cross-site scripting (XSS) vulnerability

NIEDRIG 3.5CVE-2014-2260 · GHSA-9crx-p357-5vw8 · PYSEC-2014-98 · Published 30/04/2014 · updated 17/06/2026

Kurz gesagt

CVE-2014-2260 ist eine Schwachstelle (NIEDRIG (CVSS 3.5)) in ajenti, ajenti (ajenti).
Wahrscheinlichkeit einer Ausnutzung in den nächsten 30 Tagen (EPSS): 1.5%, höher als bei 74.3% aller Schwachstellen.
Abhilfe: auf 1.2.14, 1.2.15 oder neuer aktualisieren.

Package	Affected versions	Patched versions
ajenti PyPI	`< 1.2.14< 1.2.15`	`1.2.141.2.15`
ajenti ajenti	`= 1.2.13`	No fix yet

Description

Cross-site scripting (XSS) vulnerability in plugins/main/content/js/ajenti.coffee in Ajenti before 1.2.15 allows remote authenticated users to inject arbitrary web script or HTML via the command field in the Cron functionality.

NVD description

Cross-site scripting (XSS) vulnerability in plugins/main/content/js/ajenti.coffee in Eugene Pankov Ajenti 1.2.13 allows remote authenticated users to inject arbitrary web script or HTML via the command field in the Cron functionality.