medium4.3
CVE-2013-6858
Multiple cross-site scripting (XSS) vulnerabilities in OpenStack Dashboard (Horizon) 2013.2 and earlier allow local users to inject arbitrary web script or HTM…
Impact
Multiple cross-site scripting (XSS) vulnerabilities in OpenStack Dashboard (Horizon) 2013.2 and earlier allow local users to inject arbitrary web script or HTML via an instance name to (1) "Volumes" or (2) "Network Topology" page.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Openstack | Horizon | from 2013.1 through 2013.2 |
| Opensuse | Opensuse | Version 13.1 |
| Canonical | Ubuntu Linux | Versions 12.10, 13.04, 13.10 |
Weakness classification
References
- NVD record
- CVE.org record
- http://lists.opensuse.org/opensuse-updates/2015-01/msg00040.html
- http://secunia.com/advisories/55770
- http://secunia.com/advisories/56117
- http://www.securityfocus.com/bid/63787
- http://www.ubuntu.com/usn/USN-2062-1
- https://bugs.launchpad.net/horizon/+bug/1247675
- http://lists.opensuse.org/opensuse-updates/2015-01/msg00040.html
- http://secunia.com/advisories/55770
- http://secunia.com/advisories/56117
- http://www.securityfocus.com/bid/63787
- http://www.ubuntu.com/usn/USN-2062-1
- https://bugs.launchpad.net/horizon/+bug/1247675