Vulnerability Details CVE-2014-1427
A vulnerability in the REST API of Ubuntu MAAS allows an attacker to cause a logged-in user to execute commands via cross-site scripting. This issue affects MAAS versions prior to 1.9.2.
Exploit prediction scoring system (EPSS) score
EPSS Score 0.004
EPSS Ranking 58.7%
CVSS Severity
CVSS v3 Score 9.6
CVSS v2 Score 4.3
Products affected by CVE-2014-1427
-
cpe:2.3:a:canonical:metal_as_a_service:1.9.0
-
cpe:2.3:a:canonical:metal_as_a_service:1.9.1