Vulnerability Details CVE-2013-1070
Cross-site scripting (XSS) vulnerability in the API in Ubuntu Metal as a Service (MaaS) 1.2 and 1.4 allows remote attackers to inject arbitrary web script or HTML via the op parameter to nodes/.
Exploit prediction scoring system (EPSS) score
EPSS Score 0.003
EPSS Ranking 52.8%
CVSS Severity
CVSS v2 Score 4.3
References
Products affected by CVE-2013-1070
-
cpe:2.3:a:ubuntu:metal_as_a_service:1.2
-
cpe:2.3:a:ubuntu:metal_as_a_service:1.4