OpenStack Swift Unchecked user input in XML responses
Date: 2022-05
Affected: pip/swift
Attack vector: rce
Category: vulnerability-disclosure
Severity: High
CVE: CVE-2013-2161
CWE: CWE-94

XML injection vulnerability in account/utils.py in OpenStack Swift Folsom, Grizzly, and Havana allows attackers to trigger invalid or spoofed Swift responses via an account name.


Mitigations:

Architectural layers (MAESTRO):