CVE-2017-2661 | BDVDB-2026-97684 Detail

ClusterLabspcs

Description#

ClusterLabs pcs before version 0.9.157 is vulnerable to a cross-site scripting vulnerability due to improper validation of Node name field when creating new cluster or adding existing cluster.

Impact#

No impact statement in the source data.

Weaknesses#

CWE-79 Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')

References#

https://github.com/ClusterLabs/pcs/commit/1874a769b5720ae5430f10c6cedd234430bc703f
https://bugzilla.redhat.com/show_bug.cgi?id=1428948

Exploit#

No public exploit known

History#

Version 12018-03-12Record published in the CVE List.
Version 22024-09-16Most recent update recorded in the CVE List.