Unrated severityNVD Advisory· Published Feb 17, 2014· Updated Apr 29, 2026
CVE-2013-1070
CVE-2013-1070
Description
Cross-site scripting (XSS) vulnerability in the API in Ubuntu Metal as a Service (MaaS) 1.2 and 1.4 allows remote attackers to inject arbitrary web script or HTML via the op parameter to nodes/.
Affected products
2cpe:2.3:a:ubuntu:metal_as_a_service:1.2:*:*:*:*:*:*:*+ 1 more
- cpe:2.3:a:ubuntu:metal_as_a_service:1.2:*:*:*:*:*:*:*
- cpe:2.3:a:ubuntu:metal_as_a_service:1.4:*:*:*:*:*:*:*
Patches
0No patches discovered yet.
Vulnerability mechanics
AI mechanics synthesis has not run for this CVE yet.
References
3- www.securityfocus.com/bid/65575nvdExploit
- bugs.launchpad.net/maas/%2Bbug/1251336nvdVendor Advisory
- www.ubuntu.com/usn/USN-2105-1nvd
News mentions
0No linked articles in our index yet.