Skip to content

CVE-2013-2161

OpenStack Swift Unchecked user input in XML responses

7.5 HighFix available

CVE-2013-2161 is a high vulnerability (CVSS 7.5) in Openstack Folsom, published August 12, 2013. No source lists public exploit code. EPSS puts the chance of exploitation in the next 30 days at 1.91%, the 79th percentile. Fixed in swift 1.9.0.

XML injection vulnerability in account/utils.py in OpenStack Swift Folsom, Grizzly, and Havana allows attackers to trigger invalid or spoofed Swift responses via an account name.

Exploit likelihood

1.91%Up 0.9 points since Feb 4, 2022

What each source reports

NVD Score used 7.5

XML injection vulnerability in account/utils.py in OpenStack Swift Folsom, Grizzly, and Havana allows attackers to trigger invalid or spoofed Swift responses via an account name.

Record: CVE-2013-2161
CVSS 2.0: 7.5 HighAV:N/AC:L/Au:N/C:P/I:P/A:P
Weakness: CWE-94
Updated: 2026-11-02

CVE List No score

XML injection vulnerability in account/utils.py in OpenStack Swift Folsom, Grizzly, and Havana allows attackers to trigger invalid or spoofed Swift responses via an account name.

Record: CVE-2013-2161
Updated: 2026-11-02

EUVDEUVD-2022-3465 No score

XML injection vulnerability in account/utils.py in OpenStack Swift Folsom, Grizzly, and Havana allows attackers to trigger invalid or spoofed Swift responses via an account name.

Record: EUVD-2022-3465
Updated: 2026-11-03

GitHub AdvisoriesGHSA-9xgv-6v35-mmcj No score

OpenStack Swift Unchecked user input in XML responses

XML injection vulnerability in account/utils.py in OpenStack Swift Folsom, Grizzly, and Havana allows attackers to trigger invalid or spoofed Swift responses via an account name.

Record: GHSA-9xgv-6v35-mmcj
Weakness: CWE-94
Updated: 2026-11-02

OSV No score

XML injection vulnerability in account/utils.py in OpenStack Swift Folsom, Grizzly, and Havana allows attackers to trigger invalid or spoofed Swift responses via an account name.

Record: CVE-2013-2161
Updated: 2026-11-02

OSVDEBIAN-CVE-2013-2161 No score

XML injection vulnerability in account/utils.py in OpenStack Swift Folsom, Grizzly, and Havana allows attackers to trigger invalid or spoofed Swift responses via an account name.

Record: DEBIAN-CVE-2013-2161
Updated: 2026-11-02

OSVGHSA-9xgv-6v35-mmcj No score

OpenStack Swift Unchecked user input in XML responses

XML injection vulnerability in account/utils.py in OpenStack Swift Folsom, Grizzly, and Havana allows attackers to trigger invalid or spoofed Swift responses via an account name.

Record: GHSA-9xgv-6v35-mmcj
Weakness: CWE-94
Updated: 2026-11-02

OSVPYSEC-2026-930 No score

OpenStack Swift Unchecked user input in XML responses

XML injection vulnerability in account/utils.py in OpenStack Swift Folsom, Grizzly, and Havana allows attackers to trigger invalid or spoofed Swift responses via an account name.

Record: PYSEC-2026-930
Updated: 2026-11-02

Affected products

Affected packages

Affected packages
Package	Affected	Fixed
`swift` PyPI	before 1.9.0	1.9.0
`swift` Debian:12	before 1.8.0-6	1.8.0-6
`swift` Debian:13	before 1.8.0-6	1.8.0-6
`swift` Debian:14	before 1.8.0-6	1.8.0-6
`swift` Debian:7	before 1.4.8-2+deb7u1, plus listed versions 1.4.8-2	1.4.8-2+deb7u1
`swift` PyPI	before 1.9.0, plus listed versions 1.0.2	1.9.0
`openstack-swift` Red Hat:openstack:3::el6	before 0:1.8.0-6.el6ost	0:1.8.0-6.el6ost
`openstack-swift-account` Red Hat:openstack:3::el6	before 0:1.8.0-6.el6ost	0:1.8.0-6.el6ost
`openstack-swift-container` Red Hat:openstack:3::el6	before 0:1.8.0-6.el6ost	0:1.8.0-6.el6ost
`openstack-swift-doc` Red Hat:openstack:3::el6	before 0:1.8.0-6.el6ost	0:1.8.0-6.el6ost
`openstack-swift-object` Red Hat:openstack:3::el6	before 0:1.8.0-6.el6ost	0:1.8.0-6.el6ost
`openstack-swift-proxy` Red Hat:openstack:3::el6	before 0:1.8.0-6.el6ost	0:1.8.0-6.el6ost

History

History
When	Changed	Sources
2026-11-03	aliases	EUVD
2026-11-02	created	CVE List, GitHub Advisories, NVD, OSV

References

Show 15 moreShow less