OpenStack Object Storage (swift)

  1. Series folsom
  2. Bug #1183884
  3. Comment #13

Comment 13 for bug 1183884

Revision history for this message
Jeremy Stanley (fungi) wrote : Re: Unescaped content embedded in XML

Proposed impact description...

Title: Unchecked user input in Swift XML
Reporter: Alex Gaynor (Rackspace)
Products: Swift
Affects: All versions

Description:
Alex Gaynor withRackspace reported a vulnerability in the
AccountController class' GET method within the Swift account.server
module. By including unescaped quotes within data passed to the
account variable, unparsable or arbitrary XML can be included.