CVE-2013-1070

Ubuntu MaaS 1.2-1.4 - XSS

Title source: llm

Description

Cross-site scripting (XSS) vulnerability in the API in Ubuntu Metal as a Service (MaaS) 1.2 and 1.4 allows remote attackers to inject arbitrary web script or HTML via the op parameter to nodes/.

Scores

EPSS 0.0034
EPSS Percentile 56.2%

Details

CWE
CWE-79
Status published
Products (3)
ubuntu/metal_as_a_service
ubuntu/metal_as_a_service
n/a/n/a
Published Feb 17, 2014
Tracked Since Feb 18, 2026