{"id":"CVE-2013-2161","published":"2013-08-20T22:00:00Z","modified":"2024-08-06T15:27:40Z","title":"XML injection vulnerability in account/utils.py in OpenStack Swift Folsom, Grizzly, and Havana allows attackers to…","vendor":null,"product":null,"tier":"tail","description":{"text":"XML injection vulnerability in account/utils.py in OpenStack Swift Folsom, Grizzly, and Havana allows attackers to trigger invalid or spoofed Swift responses via an account name.","provenance":"source","from":"CVE.org"},"cvss":null,"epss":{"score":0.0191,"percentile":0.79711,"provenance":"source"},"cwes":[],"references":[{"url":"http://www.debian.org/security/2012/dsa-2737","tags":["vendor-advisory","x_refsource_DEBIAN"]},{"url":"http://lists.opensuse.org/opensuse-updates/2013-07/msg00021.html","tags":["vendor-advisory","x_refsource_SUSE"]},{"url":"https://bugs.launchpad.net/swift/+bug/1183884","tags":["x_refsource_CONFIRM"]},{"url":"http://rhn.redhat.com/errata/RHSA-2013-0993.html","tags":["vendor-advisory","x_refsource_REDHAT"]},{"url":"http://www.openwall.com/lists/oss-security/2013/06/13/4","tags":["mailing-list","x_refsource_MLIST"]}],"priority":{"score":15.9,"factors":[{"name":"EPSS percentile","points":15.94}]},"affected":[{"ecosystem":"PyPI","package":"swift","vulnerableRanges":["<1.9.0"],"patched":["1.9.0"],"from":["GHSA-9xgv-6v35-mmcj","PYSEC-2026-930"],"provenance":"source"}],"euvd":{"id":"EUVD-2022-3465","exploited":false,"provenance":"source"},"lineage":{"familyId":"fam-swift-cve-2013-2161","children":[{"from":"CVE-2013-2161","to":"CVE-2014-7960","relation":"related","confidence":"medium","kind":"lineage","evidence":[{"kind":"same-code","provenance":"machine","files":["swift/account/server.py"],"commits":["https://github.com/openstack/swift/commit/6659382c4fa348e1ebbce2424968dd7267ea1db1","https://github.com/openstack/swift/commit/8f9b135e0a16478a628f20224ce5babe62d4aaba","https://github.com/openstack/swift/commit/06800cbe446ce4c937a57b69517b55c3bba9b6e1","https://github.com/openstack/swift/commit/2c4622a28ea04e1c6b2382189b0a1f6cccdc9c0f"],"basis":"rarely changed file"}]}],"packageHistory":[{"cve":"CVE-2012-4406","published":"2012-10-22","fixed":"1.7.0","kev":false,"link":{"from":"CVE-2012-4406","to":"CVE-2013-2161","relation":"successor","confidence":"low","kind":"sequence","evidence":[{"kind":"version-step","provenance":"source","package":"PyPI:swift","fromFixed":"1.7.0","toFixed":"1.9.0","daysApart":302}]}},{"cve":"CVE-2013-2161","published":"2013-08-20","fixed":"1.9.0","kev":false},{"cve":"CVE-2013-4155","published":"2013-08-20","fixed":"1.9.1","kev":false,"link":{"from":"CVE-2013-2161","to":"CVE-2013-4155","relation":"successor","confidence":"medium","kind":"sequence","orderedBy":"description","evidence":[{"kind":"version-step","provenance":"source","package":"PyPI:swift","fromFixed":"1.9.0","toFixed":"1.9.1","daysApart":0},{"kind":"similar","provenance":"machine","score":0.43,"basis":"same package + description similarity"}]}},{"cve":"CVE-2014-0006","published":"2014-01-23","fixed":"1.12.0","kev":false},{"cve":"CVE-2014-3497","published":"2014-07-03","fixed":"2.0.0","kev":false}],"package":"PyPI:swift"}}