Vulnerabilities

Account users in Apache CloudStack by default are allowed to upload and register templates for deploying instances and volumes for attaching them as data disks to their existing instances.

The logout operation in the CloudStack web interface does not expire the user session completely which is valid until expiry by time or restart of the backend service.

Users logged into the Apache CloudStack's web interface can be tricked to submit malicious CSRF requests due to missing validation of the origin of the requests.