CVE-2017-2661
Medium
Description
ClusterLabs pcs before version 0.9.157 is vulnerable to a cross-site scripting vulnerability due to improper validation of Node name field when creating new cluster or adding existing cluster.
SeverityMedium
CVSS6.1
Exploit probability—
ProductClusterlabs Pcs
PublishedMar 12, 2018
First seenMar 12, 2018
Weakness typeCWE-79Cross-site scripting (XSS)
How to fix
Update
- clusterlabs pcs0.9.157 or later
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| clusterlabs pcs | v < 0.9.157 | 0.9.157 |
Check your version
Choose the product and enter the version you run to see whether it falls in the affected range.
In the Intelligence 360 plan
Attack Surface Management
See the assets tied to your domains, the technologies they run and known vulnerabilities in one list.