Critical severity9.6NVD Advisory· Published Apr 22, 2019· Updated Jun 17, 2026

CVE-2014-1427

Description

A vulnerability in the REST API of Ubuntu MAAS allows an attacker to cause a logged-in user to execute commands via cross-site scripting. This issue affects MAAS versions prior to 1.9.2.

AI Insight

LLM-synthesized narrative grounded in this CVE's description and references.

Affected products

Canonical/Metal As A Service
cpe:2.3:a:canonical:metal_as_a_service:*:*:*:*:*:*:*:*
Range: <1.9.2
Ubuntu/MaaSllm-fuzzy
Range: <1.9.2
Ubuntu/MAASv5
Range: unspecified

Patches

Vulnerability mechanics

References

launchpad.net/maas/+milestone/1.9.2nvdThird Party Advisory

News mentions

No linked articles in our index yet.

cvss	0.624
epss	0.001
exploit	0.000
kev	0.000
patch	0.000
ransomware	0.000