High severityNVD Advisory· Published Aug 20, 2013· Updated Jun 16, 2026

CVE-2013-2161

Description

XML injection vulnerability in account/utils.py in OpenStack Swift Folsom, Grizzly, and Havana allows attackers to trigger invalid or spoofed Swift responses via an account name.

AI Insight

LLM-synthesized narrative grounded in this CVE's description and references.

Affected packages

Versions sourced from the GitHub Security Advisory.

Package	Affected versions	Patched versions
swiftPyPI	< 1.9.0	1.9.0

Affected products

OpenStack/Folsom
cpe:2.3:a:openstack:folsom:-:*:*:*:*:*:*:*
OpenStack/Grizzly
cpe:2.3:a:openstack:grizzly:-:*:*:*:*:*:*:*
OpenStack/Havana
cpe:2.3:a:openstack:havana:-:*:*:*:*:*:*:*
OpenSUSE/openSUSE
cpe:2.3:o:opensuse:opensuse:12.3:*:*:*:*:*:*:*
ghsa-coords
pkg:pypi/swift
Range: < 1.9.0

Patches

Vulnerability mechanics

References

github.com/advisories/GHSA-9xgv-6v35-mmcjghsaADVISORY
nvd.nist.gov/vuln/detail/CVE-2013-2161ghsaADVISORY
github.com/openstack/swift/commit/4eed6bf5b5028409f730be97ddcfb6bfa893c976ghsaWEB
github.com/openstack/swift/commit/92d7eadd328797d392758c79e258c8455874c80eghsaWEB
lists.opensuse.org/opensuse-updates/2013-07/msg00021.htmlnvdWEB
rhn.redhat.com/errata/RHSA-2013-0993.htmlnvdWEB
www.debian.org/security/2012/dsa-2737nvdWEB
www.openwall.com/lists/oss-security/2013/06/13/4nvdWEB
bugs.launchpad.net/swift/+bug/1183884nvdWEB
github.com/openstack/swift/commit/6659382c4fa348e1ebbce2424968dd7267ea1db1ghsaWEB
github.com/openstack/swift/commit/8f9b135e0a16478a628f20224ce5babe62d4aabaghsaWEB

News mentions

No linked articles in our index yet.

cvss	0.455
epss	0.002
exploit	0.000
kev	0.000
patch	-0.070
ransomware	0.000