CVE-2014-1427

A vulnerability in the REST API of Ubuntu MAAS allows an attacker to cause a logged-in user to execute commands via cross-site scripting. This issue affects MAAS versions prior to 1.9.2.

Score

CVSS 3.0 9.6 Critical

Status

Modified - security@ubuntu.com

Published

2019-04-22

Last modified

2024-09-16

Weaknesses

CWE-79

Affected products

• Metal As A Service (Canonical)
• Maas (Ubuntu)

References

• https://launchpad.net/maas/+milestone/1.9.2