CVE-2014-125078: yanheven console horizon.instances.js cross site scripting

Q: What is the severity of CVE-2014-125078?

CVE-2014-125078 is classified as a problematic vulnerability that can lead to cross site scripting.

Q: How do I fix CVE-2014-125078?

To fix CVE-2014-125078, update to a version of OpenStack Horizon released after July 8, 2014.

Q: What functionality is affected by CVE-2014-125078?

CVE-2014-125078 affects an unknown functionality in the file horizon/static/horizon/js/horizon.instances.js.

Q: Can CVE-2014-125078 be exploited remotely?

Yes, the vulnerability CVE-2014-125078 can be exploited remotely.

Q: What type of vulnerability is CVE-2014-125078?

CVE-2014-125078 is a cross site scripting vulnerability.

Published Jan 15, 2023

Updated

A vulnerability was found in yanheven console and classified as problematic. Affected by this issue is some unknown functionality of the file horizon/static/horizon/js/horizon.instances.js. The manipulation leads to cross site scripting. The attack may be launched remotely. The patch is identified as 32a7b713468161282f2ea01d5e2faff980d924cd. It is recommended to apply a patch to fix this issue. VDB-218354 is the identifier assigned to this vulnerability.

Affected Software

1 affected component

Horizon Project Horizon<2014-07-08

Remediation

Patch Available

https://github.com/yanheven/console/commit/32a7b713468161282f2ea01d5e2faff980d924cd

Event History

Jan 15, 2023

CVE Published

via MITRE·08:58 AM

Data Sourced

via MITRE·08:58 AM

DescriptionSeverityWeakness

Frequently Asked Questions

What is the severity of CVE-2014-125078?

CVE-2014-125078 is classified as a problematic vulnerability that can lead to cross site scripting.

How do I fix CVE-2014-125078?

To fix CVE-2014-125078, update to a version of OpenStack Horizon released after July 8, 2014.

What functionality is affected by CVE-2014-125078?