CVE-2014-4301
ajenti ajenti: no CVSS score yet. EPSS 2.3% chance of exploitation in the next 30 days. Fixed in ajenti 1.2.21.7.
Multiple cross-site scripting (XSS) vulnerabilities in the respond_error function in routing.py in Eugene Pankov Ajenti before 1.2.21.7 allow remote attackers to inject arbitrary web script or HTML via the PATH_INFO to (1) resources.js or (2) resources.css in ajenti:static/, related to the traceback page.
- EPSS
- 2.3% chance of exploitation in the next 30 days; higher than 83% of CVEs (scores of 2026-10-31)
- CWE
- CWE-79
- Published
- Modified
- Record from
- the NVD, synced
Affected
- ajenti:ajenti
Packages (OSV)
| Advisory | Ecosystem | Package | Affected | Fixed in |
|---|---|---|---|---|
| GHSA-2ch8-f849-pjg3 | PyPI | ajenti | <1.2.21.7 | 1.2.21.7 |
| PYSEC-2014-99 | PyPI | ajenti | <1.2.21.7 | 1.2.21.7 |