CVE-2012-2094: XSS
Cross-site scripting (XSS) vulnerability in the refresh mechanism in the log viewer in horizon/static/horizon/js/horizon.js in OpenStack Dashboard (Horizon) folsom-1 and 2012.1 and earlier allows remote attackers to inject arbitrary web script or HTML via the guest console.
Other sources
Cross-site scripting (XSS) vulnerability in the refresh mechanism in the log viewer in horizon/static/horizon/js/horizon.js in OpenStack Dashboard (Horizon) folsom-1 and 2012.1 and earlier allows remote attackers to inject arbitrary web script or HTML via the guest console.
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2012-2094?
CVE-2012-2094 is classified as a moderate severity cross-site scripting vulnerability.
How do I fix CVE-2012-2094?
To fix CVE-2012-2094, update to a version of OpenStack Horizon later than 2012.1 or folsom-1.
Which versions of OpenStack Horizon are affected by CVE-2012-2094?
CVE-2012-2094 affects OpenStack Horizon versions folsom-1 and 2012.1 and earlier.
What type of vulnerability is CVE-2012-2094?
CVE-2012-2094 is a cross-site scripting (XSS) vulnerability that allows injection of arbitrary web scripts or HTML.
Can CVE-2012-2094 be exploited remotely?
Yes, CVE-2012-2094 can be exploited remotely by attackers via the guest console.