CVE-2017-2661

ClusterLabs pcs before version 0.9.157 is vulnerable to a cross-site scripting vulnerability due to improper validation of Node name field when creating new cluster or adding existing cluster.

Score

CVSS 3.0 6.1 Medium

Status

Modified - secalert@redhat.com

Published

2018-03-12

Last modified

2024-09-16

Weaknesses

CWE-79

Affected products

• Pcs (Clusterlabs)

References

• https://bugzilla.redhat.com/show_bug.cgi?id=1428948
• https://github.com/ClusterLabs/pcs/commit/1874a769b5720ae5430f10c6cedd234430bc703f