Unrated

ClusterLabs pcs before version 0.9.157 is vulnerable to a cross-site scripting vulnerability due to improper validation of Node name field when creati...

CVE-2017-2661 First seen on SecPulse Mar 13, 2018

Fix status by distribution

Fixed packages published by each distribution for this CVE

Debian DEBIAN-CVE-2017-2661 pcs Fixed in: 0.9.155+dfsg-2

Original description The description as published by the source.

ClusterLabs pcs before version 0.9.157 is vulnerable to a cross-site scripting vulnerability due to improper validation of Node name field when creating new cluster or adding existing cluster.

Source: OSV.dev (Open Source Vulnerabilities) NVD OSV

References

patch bugzilla.redhat.com
patch github.com

Key facts

Severity: Unrated
Published: Mar 13, 2018
First seen on SecPulse: Mar 13, 2018

NVD OSV

Detection sources

OSV.dev (Open Source Vulnerabilities)Oct 20, 19:48