{"id":"CVE-2013-2161","aliases":["GHSA-9xgv-6v35-mmcj","PYSEC-2026-930"],"url":"https://o3.security/vulnerability/CVE-2013-2161","summary":"OpenStack Swift Unchecked user input in XML responses","details":"XML injection vulnerability in account/utils.py in OpenStack Swift Folsom, Grizzly, and Havana allows attackers to trigger invalid or spoofed Swift responses via an account name.","published":"2013-08-20T22:55:04Z","modified":"2026-07-07T11:56:07.262683773Z","cvss":null,"epss":{"score":0.01894,"percentile":0.78019,"asOf":"2026-08-22"},"cisaKev":null,"exploitsKnown":0,"affectedPackages":[{"ecosystem":"PyPI","name":"swift","fixedVersion":"1.9.0"}],"fix":null,"references":[{"type":"ADVISORY","url":"http://rhn.redhat.com/errata/RHSA-2013-0993.html"},{"type":"ADVISORY","url":"http://www.debian.org/security/2012/dsa-2737"},{"type":"WEB","url":"http://lists.opensuse.org/opensuse-updates/2013-07/msg00021.html"},{"type":"WEB","url":"http://www.openwall.com/lists/oss-security/2013/06/13/4"},{"type":"WEB","url":"https://bugs.launchpad.net/swift/+bug/1183884"}],"provenance":{"sources":["OSV.dev","FIRST.org (EPSS)"],"lastVerified":"2026-07-07T11:56:07.262683773Z"}}