CVE-2014-2260 Ajenti Cross-site scripting (XSS) vulnerability
LowCVSS 3.5
EPSS 1.5%
Public exploit
- Published
- Updated
- Exploit status
- Public exploit available
Description
Cross-site scripting (XSS) vulnerability in plugins/main/content/js/ajenti.coffee in Eugene Pankov Ajenti 1.2.13 allows remote authenticated users to inject arbitrary web script or HTML via the command field in the Cron functionality.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| pypi ajenti(PyPI) | < 1.2.15 | 1.2.15 |
| pypi ajenti(PyPI) | = 0.99.11 | No fix listed |
| pypi ajenti(PyPI) | = 0.99.19 | No fix listed |
| pypi ajenti(PyPI) | = 0.99.20 | No fix listed |
| pypi ajenti(PyPI) | = 0.99.21 | No fix listed |
| pypi ajenti(PyPI) | = 0.99.22 | No fix listed |
| pypi ajenti(PyPI) | = 0.99.23 | No fix listed |
| pypi ajenti(PyPI) | = 0.99.24 | No fix listed |
| pypi ajenti(PyPI) | = 0.99.25 | No fix listed |
| pypi ajenti(PyPI) | = 0.99.26 | No fix listed |
| pypi ajenti(PyPI) | = 0.99.27 | No fix listed |
| pypi ajenti(PyPI) | = 0.99.28 | No fix listed |
| pypi ajenti(PyPI) | = 0.99.29 | No fix listed |
| pypi ajenti(PyPI) | = 0.99.30 | No fix listed |
| pypi ajenti(PyPI) | = 0.99.31 | No fix listed |
| pypi ajenti(PyPI) | = 0.99.32 | No fix listed |
| pypi ajenti(PyPI) | = 0.99.33 | No fix listed |
| pypi ajenti(PyPI) | = 0.99.34 | No fix listed |
| pypi ajenti(PyPI) | = 0.99.35 | No fix listed |
| pypi ajenti(PyPI) | = 0.99.36 | No fix listed |
| pypi ajenti(PyPI) | = 0.99.37 | No fix listed |
| pypi ajenti(PyPI) | = 0.99.38 | No fix listed |
| pypi ajenti(PyPI) | = 0.99.39 | No fix listed |
| pypi ajenti(PyPI) | = 0.99.7 | No fix listed |
| pypi ajenti(PyPI) | = 0.99.8 | No fix listed |
Show 41 more
| Product | Affected versions | Fixed in |
|---|---|---|
| pypi ajenti(PyPI) | = 1.0.0 | No fix listed |
| pypi ajenti(PyPI) | = 1.0.1 | No fix listed |
| pypi ajenti(PyPI) | = 1.0.2 | No fix listed |
| pypi ajenti(PyPI) | = 1.0.3 | No fix listed |
| pypi ajenti(PyPI) | = 1.0.8 | No fix listed |
| pypi ajenti(PyPI) | = 1.1.0 | No fix listed |
| pypi ajenti(PyPI) | = 1.1.1 | No fix listed |
| pypi ajenti(PyPI) | = 1.1.2 | No fix listed |
| pypi ajenti(PyPI) | = 1.1.3 | No fix listed |
| pypi ajenti(PyPI) | = 1.1.4 | No fix listed |
| pypi ajenti(PyPI) | = 1.1.5 | No fix listed |
| pypi ajenti(PyPI) | = 1.1.6 | No fix listed |
| pypi ajenti(PyPI) | = 1.1.8 | No fix listed |
| pypi ajenti(PyPI) | = 1.1.8.2 | No fix listed |
| pypi ajenti(PyPI) | = 1.1.9 | No fix listed |
| pypi ajenti(PyPI) | = 1.1.9.1 | No fix listed |
| pypi ajenti(PyPI) | = 1.1.9.2 | No fix listed |
| pypi ajenti(PyPI) | = 1.1.9.3 | No fix listed |
| pypi ajenti(PyPI) | = 1.2.0 | No fix listed |
| pypi ajenti(PyPI) | = 1.2.1 | No fix listed |
| pypi ajenti(PyPI) | = 1.2.10 | No fix listed |
| pypi ajenti(PyPI) | = 1.2.11 | No fix listed |
| pypi ajenti(PyPI) | = 1.2.11.1 | No fix listed |
| pypi ajenti(PyPI) | = 1.2.11.2 | No fix listed |
| pypi ajenti(PyPI) | = 1.2.13 | No fix listed |
| pypi ajenti(PyPI) | = 1.2.13.1 | No fix listed |
| pypi ajenti(PyPI) | = 1.2.13.2 | No fix listed |
| pypi ajenti(PyPI) | = 1.2.14 | No fix listed |
| pypi ajenti(PyPI) | = 1.2.14.1 | No fix listed |
| pypi ajenti(PyPI) | = 1.2.2 | No fix listed |
| pypi ajenti(PyPI) | = 1.2.3 | No fix listed |
| pypi ajenti(PyPI) | = 1.2.4 | No fix listed |
| pypi ajenti(PyPI) | = 1.2.5 | No fix listed |
| pypi ajenti(PyPI) | = 1.2.6 | No fix listed |
| pypi ajenti(PyPI) | = 1.2.6.1 | No fix listed |
| pypi ajenti(PyPI) | = 1.2.6.2 | No fix listed |
| pypi ajenti(PyPI) | = 1.2.7 | No fix listed |
| pypi ajenti(PyPI) | = 1.2.8 | No fix listed |
| pypi ajenti(PyPI) | = 1.2.9 | No fix listed |
| pypi ajenti(PyPI) | < 1.2.14 | 1.2.14 |
| ajenti | = 1.2.13 | No fix listed |
References
- nvd.nist.gov third-party-advisory vendor-advisory
- github.com issue-tracking
- github.com
- github.com exploit patch
- github.com patch
- github.com product
- github.com
- web.archive.org
- packetstormsecurity.com exploit
- 64982 vdb-entry
- 102174 vdb-entry
- github.com vendor-advisory