CVE-2013-6858: XSS
Multiple cross-site scripting (XSS) vulnerabilities in OpenStack Dashboard (Horizon) 2013.2 and earlier allow local users to inject arbitrary web script or HTML via an instance name to (1) "Volumes" or (2) "Network Topology" page.
Affected Software
Remediation
Patch Available
Event History
Frequently Asked Questions
What is the severity of CVE-2013-6858?
CVE-2013-6858 has a medium severity level due to its potential for cross-site scripting (XSS).
How do I fix CVE-2013-6858?
To fix CVE-2013-6858, update OpenStack Dashboard (Horizon) to a version later than 2013.2 that patches the XSS vulnerabilities.
What versions are affected by CVE-2013-6858?
CVE-2013-6858 affects OpenStack Dashboard (Horizon) versions 2013.2 and earlier as well as specific versions of openSUSE and Ubuntu Linux.
What are the implications of CVE-2013-6858?
The implications of CVE-2013-6858 include the risk of local users injecting malicious scripts that may lead to unauthorized actions within the application.
Who is impacted by CVE-2013-6858?
Any local user of OpenStack Dashboard (Horizon) 2013.2 or earlier on affected operating systems is potentially impacted by CVE-2013-6858.