REDHAT-BUG-1343982: High severity Horizon Horizon vulnerability
Published Jun 8, 2016
·Updated
Beth Lancaster and Brandon Sawyers from Virginia Tech reported a vulnerability in Horizon. By injecting Angularjs template in dashboard forms, such as image's description, an authenticated user may trigger a cross-site-scripting vulnerability when another user browses the affected pages. It may result in potential assets theft like user access credentials. All Horizon setups are affected.
Affected Software
1 affected component
Horizon Horizon
Event History
Jun 8, 2016
Data Sourced
via Red Hat·12:36 PM
DescriptionSeverityAffected Software