Moderate severityNVD Advisory· Published Jul 3, 2014· Updated Jun 17, 2026
CVE-2014-3497
CVE-2014-3497
Description
Cross-site scripting (XSS) vulnerability in OpenStack Swift 1.11.0 through 1.13.1 allows remote attackers to inject arbitrary web script or HTML via the WWW-Authenticate header.
AI Insight
LLM-synthesized narrative grounded in this CVE's description and references.
Affected packages
Versions sourced from the GitHub Security Advisory.
| Package | Affected versions | Patched versions |
|---|---|---|
swiftPyPI | >= 1.11.0, < 2.0.0 | 2.0.0 |
Affected products
7cpe:2.3:a:openstack:swift:1.11.0:*:*:*:*:*:*:*+ 5 more
- cpe:2.3:a:openstack:swift:1.11.0:*:*:*:*:*:*:*
- cpe:2.3:a:openstack:swift:1.12.0:*:*:*:*:*:*:*
- cpe:2.3:a:openstack:swift:1.13.0:*:*:*:*:*:*:*
- cpe:2.3:a:openstack:swift:1.13.1:*:*:*:*:*:*:*
- cpe:2.3:a:openstack:swift:1.13.1:rc1:*:*:*:*:*:*
- cpe:2.3:a:openstack:swift:1.13.1:rc2:*:*:*:*:*:*
Patches
Vulnerability mechanics
References
16- github.com/advisories/GHSA-66vj-393f-hxfvghsaADVISORY
- nvd.nist.gov/vuln/detail/CVE-2014-3497ghsaADVISORY
- lists.openstack.org/pipermail/openstack-announce/2014-June/000243.htmlnvdWEB
- www.openwall.com/lists/oss-security/2014/06/19/10nvdWEB
- www.ubuntu.com/usn/USN-2256-1nvdWEB
- access.redhat.com/errata/RHSA-2014:0941ghsaWEB
- access.redhat.com/security/cve/CVE-2014-3497ghsaWEB
- bugzilla.redhat.com/show_bug.cgighsaWEB
- opendev.org/openstack/swiftghsaPACKAGE
- review.openstack.orgghsaWEB
- review.openstack.orgghsaWEB
- web.archive.org/web/20200229060002/http://www.securityfocus.com/bid/68116ghsaWEB
- secunia.com/advisories/59532nvd
- www.securityfocus.com/bid/68116nvd
- review.openstack.orgnvd
- review.openstack.orgnvd
News mentions
0No linked articles in our index yet.