CVE-2013-6858

Опубликовано: 23 нояб. 2013

Источник: nvd

CVSS2: 4.3

EPSS Низкий

Описание

Multiple cross-site scripting (XSS) vulnerabilities in OpenStack Dashboard (Horizon) 2013.2 and earlier allow local users to inject arbitrary web script or HTML via an instance name to (1) "Volumes" or (2) "Network Topology" page.

Ссылки

http://lists.opensuse.org/opensuse-updates/2015-01/msg00040.html
Mailing List
Third Party Advisory
http://secunia.com/advisories/55770
Third Party Advisory
http://secunia.com/advisories/56117
Third Party Advisory
http://www.securityfocus.com/bid/63787
Third Party Advisory
VDB Entry
http://www.ubuntu.com/usn/USN-2062-1
Third Party Advisory
https://bugs.launchpad.net/horizon/+bug/1247675
Issue Tracking
Patch
Third Party Advisory
http://lists.opensuse.org/opensuse-updates/2015-01/msg00040.html
Mailing List
Third Party Advisory
http://secunia.com/advisories/55770
Third Party Advisory
http://secunia.com/advisories/56117
Third Party Advisory
http://www.securityfocus.com/bid/63787
Third Party Advisory
VDB Entry
http://www.ubuntu.com/usn/USN-2062-1
Third Party Advisory
https://bugs.launchpad.net/horizon/+bug/1247675
Issue Tracking
Patch
Third Party Advisory

Уязвимые конфигурации

Конфигурация 1

cpe:2.3:a:openstack:horizon:*:*:*:*:*:*:*:*

Версия от 2013.1 (включая) до 2013.2 (включая)

Конфигурация 2

cpe:2.3:o:opensuse:opensuse:13.1:*:*:*:*:*:*:*

Конфигурация 3

Одно из

cpe:2.3:o:canonical:ubuntu_linux:12.10:*:*:*:*:*:*:*

cpe:2.3:o:canonical:ubuntu_linux:13.04:*:*:*:*:*:*:*

cpe:2.3:o:canonical:ubuntu_linux:13.10:*:*:*:*:*:*:*

EPSS

Процентиль: 73%

0.00755

Низкий

4.3 Medium

CVSS2

Дефекты

CWE-79

Связанные уязвимости

CVE-2013-6858

ubuntu

около 12 лет назад

CVE-2013-6858

redhat

около 12 лет назад

CVE-2013-6858

debian

около 12 лет назад

Multiple cross-site scripting (XSS) vulnerabilities in OpenStack Dashb ...

GHSA-q74p-53hj-4w6q

github

больше 3 лет назад

EPSS

Процентиль: 73%

0.00755

Низкий

4.3 Medium

CVSS2

Дефекты

CWE-79