<?xml version="1.0" encoding="UTF-8"?><?xml-stylesheet type="text/xsl" href="../assets/feed.xsl"?><rss version="2.0"><channel><title>PatchTheCVE: manila</title><link>https://patchthecve.com/</link><description>CVEs with upgrade or downgrade fix steps</description><item><title>CVE-2020-9543: OpenStack Manila &lt;7.4.1, &gt;=8.0.0 &lt;8.1.1, and &gt;=9.0.0 &lt;9.1.1 allows attackers to view, update, delete, or share</title><link>https://patchthecve.com/cve/CVE-2020-9543.html</link><guid>https://patchthecve.com/cve/CVE-2020-9543.html</guid><pubDate>Wed, 17 Jun 2026 03:28:07 +0000</pubDate><description>HIGH 8.3: OpenStack Manila &lt;7.4.1, &gt;=8.0.0 &lt;8.1.1, and &gt;=9.0.0 &lt;9.1.1 allows attackers to view, update, delete, or share resources that do not belong to them, because of a context-free lookup of a UUID. Attackers may also create resources, such as shared file systems and groups of shares on such share network</description></item><item><title>CVE-2016-6519: Cross-site scripting (XSS) vulnerability in the &quot;Shares&quot; overview in Openstack Manila before 2.5.1 allows remo</title><link>https://patchthecve.com/cve/CVE-2016-6519.html</link><guid>https://patchthecve.com/cve/CVE-2016-6519.html</guid><pubDate>Wed, 17 Jun 2026 00:51:18 +0000</pubDate><description>MEDIUM 5.4: Cross-site scripting (XSS) vulnerability in the &quot;Shares&quot; overview in Openstack Manila before 2.5.1 allows remote authenticated users to inject arbitrary web script or HTML via the Metadata field in the &quot;Create Share&quot; form.</description></item><item><title>CVE-2006-1769: Multiple cross-site scripting (XSS) vulnerabilities in UserLand Manila 9.5 and earlier allow remote attackers </title><link>https://patchthecve.com/cve/CVE-2006-1769.html</link><guid>https://patchthecve.com/cve/CVE-2006-1769.html</guid><pubDate>Tue, 16 Jun 2026 22:23:38 +0000</pubDate><description>MEDIUM 6.8: Multiple cross-site scripting (XSS) vulnerabilities in UserLand Manila 9.5 and earlier allow remote attackers to inject arbitrary web script or HTML via (1) the mode parameter in msgReader$1 and (2) the end of the URI in viewDepartment$.</description></item></channel></rss>