VulnSocial

CVE-2014-1427Disclosure(canonical / metal_as_a_service)

LOWCVSS 6.1 · MEDIUM

Signal is active with 1 mentions in latest observed window

Immediate actions

  • Track advisory updates for patch or workaround availability

Recommended action window: Monitor and triage in normal cycle

NVD description

A vulnerability in the REST API of Ubuntu MAAS allows an attacker to cause a logged-in user to execute commands via cross-site scripting. This issue affects MAAS versions prior to 1.9.2.

canonical CVEsBack to dashboard
0.0/ 10 priority

Sources & remediation

Vendor / third-party advisories
Weakness type (CWE)
CWE-79

Priority

LOW

Exploitation

NONE

PoC

NONE

Patch

NONE

Momentum

NONE

Are you affected?

If you run products in this scope, you should treat this CVE as relevant to your environment.

  • metal_as_a_service

Threat summary

  • 1 mentions across 1 observed day

What's happening

  • Technical details provided in 1 signal
  • Disclosure: 1 classified signal
  • 1 total mentions across 1 day

Affected systems

Vendors
canonical
Products
metal_as_a_service

Deep dive

Activity timeline1 mentions / 1d
00111Mentions · 2026-02-18: 1Technical Details · 2026-02-18: 102-18
Signal classification1 categories
Disclosure
1100.0%
Referenced assets1 URL
By indicator
Full discourse1 post
  • 0day Signal@0dayPublishing
    Disclosure

    🚨 CVE-2014-1427: MAAS API vulnerable to CSRF attac... CSRF in MAAS API gives attackers full control over bare-metal infrastructure with just one malicious link - trivial to w... https://zerodaysignal.com/vulnerability/CVE-2014-1427 #netsec #vulnerability #CVE #sysadmin #zeroday

    Post summary

    The tweet announces a CSRF vulnerability (CVE‑2014‑1427) in the MAAS API that allows attackers full control via a single malicious link; no PoC, exploit, or patch is discussed.

    0000042
    131 followersView on X
CPE platform detail1 entries

1 of 1 entries

PartVendorProductVersionTarget SWTarget HW
Appcanonicalmetal_as_a_service---

Explore more

Back to dashboardcanonical CVEsmetal_as_a_service vulnerabilities