CVE-2014-0157: XSS
Cross-site scripting (XSS) vulnerability in the Horizon Orchestration dashboard in OpenStack Dashboard (aka Horizon) 2013.2 before 2013.2.4 and icehouse before icehouse-rc2 allows remote attackers to inject arbitrary web script or HTML via the description field of a Heat template.
Other sources
It was reported that, if an Horizon user were tricked into using a malicious template in the Orchestration/Stack section of Horizon, it would be possible for an attacker to conduct cross-site scripting (XSS) attacks.
The original report notes "2013.2.1 version up to 2013.2.2" are affected.
Acknowledgements:
Red Hat would like to thank the OpenStack project for reporting this issue. Upstream acknowledges Cristian Fiorentino from Intel as the original reporter.
— Red Hat
Affected Software
Remediation
Recommended actions to resolve this vulnerability, in priority order.
- Upgrade
Upgrade
pip/horizonto a version that resolves this vulnerability.Fixed in 2013.2.4 - Upgrade
Upgrade
OpenStack Dashboard (Horizon) Horizon Orchestration dashboardto a version that resolves this vulnerability.Fixed in 2013.2.4 - Upgrade
Upgrade
OpenStack Dashboard (Horizon) Horizon Orchestration dashboardto a version that resolves this vulnerability.Patch icehouse-rc2 - Operational
If any users were exposed by use of a malicious Heat template, review logs and user activity in the Orchestration/Stack section and consider rotating any session-related artifacts as a precaution after applying the fix
Event History
Frequently Asked Questions
What is the severity of CVE-2014-0157?
CVE-2014-0157 is classified as a moderate severity vulnerability due to its potential for cross-site scripting (XSS) attacks.
How do I fix CVE-2014-0157?
To fix CVE-2014-0157, update OpenStack Horizon to version 2013.2.4 or later.
What versions of OpenStack are affected by CVE-2014-0157?
CVE-2014-0157 affects OpenStack Horizon versions 2013.2 to 2013.2.3 and various Icehouse releases before icehouse-rc2.
What kind of attack can exploit CVE-2014-0157?
CVE-2014-0157 can be exploited through cross-site scripting (XSS), allowing attackers to inject arbitrary web scripts or HTML.
Who can be impacted by CVE-2014-0157?
Users of OpenStack Horizon who utilize the Heat template description field could be impacted by CVE-2014-0157 if they are running vulnerable versions.