CVE-2013-6858: XSS
First published: Sat Nov 23 2013(Updated: )
Multiple cross-site scripting (XSS) vulnerabilities in OpenStack Dashboard (Horizon) 2013.2 and earlier allow local users to inject arbitrary web script or HTML via an instance name to (1) "Volumes" or (2) "Network Topology" page.
Credit: cve@mitre.org
| Affected Software | Affected Version | How to fix |
|---|---|---|
| OpenStack Horizon | >=2013.1<=2013.2 | |
| openSUSE openSUSE | =13.1 | |
| Canonical Ubuntu Linux | =12.10 | |
| Canonical Ubuntu Linux | =13.04 | |
| Canonical Ubuntu Linux | =13.10 |
Never miss a vulnerability like this again
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
Reference Links
- agent/references
- agent/type
- agent/last-modified-date
- agent/first-publish-date
- agent/weakness
- agent/remedy
- agent/severity
- agent/author
- agent/description
- agent/event
- agent/tags
- collector/nvd-index
- agent/software-canonical-lookup-request
- agent/softwarecombine
- collector/mitre-cve
- source/MITRE
- vendor/openstack
- canonical/openstack horizon
- version/openstack horizon/2013.1
- version/openstack horizon/2013.2
- vendor/opensuse
- canonical/opensuse opensuse
- version/opensuse opensuse/13.1
- vendor/canonical
- canonical/canonical ubuntu linux
- version/canonical ubuntu linux/12.10
- version/canonical ubuntu linux/13.04
- version/canonical ubuntu linux/13.10