CVE-2013-1664: Openstack Cinder Folsom

Medium severity, CVSS 5.0. EPSS: 4.8% chance of exploitation in the next 30 days.

The XML libraries for Python 3.4, 3.3, 3.2, 3.1, 2.7, and 2.6, as used in OpenStack Keystone Essex, Folsom, and Grizzly; Compute (Nova) Essex and Folsom; Cinder Folsom; Django; and possibly other products allow remote attackers to cause a denial of service (resource consumption and crash) via an XML Entity Expansion (XEE) attack.

Affected products

• Openstack Cinder Folsom: affected versions not specified
• Openstack Compute (nova) Essex: affected versions not specified
• Openstack Compute (nova) Folsom: affected versions not specified
• Openstack Folsom: affected versions not specified
• Openstack Grizzly: affected versions not specified
• Openstack Keystone Essex: affected versions not specified

Published 2013-04-03. Last modified 2026-06-16.