Cross-Site Scripting Vulnerability in ClusterLabs pcs (before version 0.9.157)

CVE-2017-2661 · MEDIUM Severity

AV:N/AC:M/AU:N/C:N/I:P/A:N

ClusterLabs pcs before version 0.9.157 is vulnerable to a cross-site scripting vulnerability due to improper validation of Node name field when creating new cluster or adding existing cluster.

Learn more about our Web Application Penetration Testing UK.