CVE-2014-4301

Multiple cross-site scripting (XSS) vulnerabilities in the respond_error function in routing.py in Eugene Pankov Ajenti before 1.2.21.7 allow remote attackers…

published June 18, 2014

CVSS
—
EPSS
2%
Percentile
83.2
In the wild
Unconfirmed
What it is

Multiple cross-site scripting (XSS) vulnerabilities in the respond_error function in routing.py in Eugene Pankov Ajenti before 1.2.21.7 allow remote attackers to inject arbitrary web script or HTML via the PATH_INFO to (1) resources.js or (2) resources.css in ajenti:static/, related to the traceback page.

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.02301 · 83.2th percentile
Published
2014-06-18T14:00Z
EPSS history
Timeline
  • 18 JUN 14:00Z
    Multiple cross-site scripting (XSS) vulnerabilities in the respond_error function in routing.py in Eugene Pankov Ajenti before 1.2.21.7 allow remote attackers…
    cvelistv5