CVE-2014-4301: XSS
Multiple cross-site scripting (XSS) vulnerabilities in the responderror function in routing.py in Eugene Pankov Ajenti before 1.2.21.7 allow remote attackers to inject arbitrary web script or HTML via the PATHINFO to (1) resources.js or (2) resources.css in ajenti:static/, related to the traceback page.
Other sources
Multiple cross-site scripting (XSS) vulnerabilities in the responderror function in routing.py in Eugene Pankov Ajenti before 1.2.21.7 allow remote attackers to inject arbitrary web script or HTML via the PATHINFO to (1) resources.js or (2) resources.css in ajenti:static/, related to the traceback page.
Affected Software
Remediation
Event History
Frequently Asked Questions
What is the severity of CVE-2014-4301?
CVE-2014-4301 is classified as a medium severity vulnerability due to its ability to allow cross-site scripting attacks.
How do I fix CVE-2014-4301?
To fix CVE-2014-4301, upgrade Ajenti to version 1.2.21.7 or later.
What types of attacks are possible with CVE-2014-4301?
CVE-2014-4301 allows remote attackers to perform cross-site scripting (XSS) attacks by injecting malicious scripts into affected applications.
Which Ajenti versions are affected by CVE-2014-4301?
CVE-2014-4301 affects all Ajenti versions prior to 1.2.21.7.
What components are implicated in CVE-2014-4301?
CVE-2014-4301 involves the `respond_error` function in `routing.py`, specifically related to `resources.js` and `resources.css`.