CVE-2013-6858

Опубликовано: 23 нояб. 2013

Источник: nvd

CVSS2: 4.3

EPSS Низкий

Описание

Multiple cross-site scripting (XSS) vulnerabilities in OpenStack Dashboard (Horizon) 2013.2 and earlier allow local users to inject arbitrary web script or HTML via an instance name to (1) "Volumes" or (2) "Network Topology" page.

Ссылки

http://lists.opensuse.org/opensuse-updates/2015-01/msg00040.html
Mailing List
Third Party Advisory
http://secunia.com/advisories/55770
Third Party Advisory
http://secunia.com/advisories/56117
Third Party Advisory
http://www.securityfocus.com/bid/63787
Third Party Advisory
VDB Entry
http://www.ubuntu.com/usn/USN-2062-1
Third Party Advisory
https://bugs.launchpad.net/horizon/+bug/1247675
Issue Tracking
Patch
Third Party Advisory
http://lists.opensuse.org/opensuse-updates/2015-01/msg00040.html
Mailing List
Third Party Advisory
http://secunia.com/advisories/55770
Third Party Advisory
http://secunia.com/advisories/56117
Third Party Advisory
http://www.securityfocus.com/bid/63787
Third Party Advisory
VDB Entry
http://www.ubuntu.com/usn/USN-2062-1
Third Party Advisory
https://bugs.launchpad.net/horizon/+bug/1247675
Issue Tracking
Patch
Third Party Advisory

Уязвимые конфигурации

Конфигурация 1

cpe:2.3:a:openstack:horizon:*:*:*:*:*:*:*:*

Версия от 2013.1 (включая) до 2013.2 (включая)

Конфигурация 2

cpe:2.3:o:opensuse:opensuse:13.1:*:*:*:*:*:*:*

Конфигурация 3

Одно из

cpe:2.3:o:canonical:ubuntu_linux:12.10:*:*:*:*:*:*:*

cpe:2.3:o:canonical:ubuntu_linux:13.04:*:*:*:*:*:*:*

cpe:2.3:o:canonical:ubuntu_linux:13.10:*:*:*:*:*:*:*

EPSS

Процентиль: 76%

0.01734

Низкий

4.3 Medium

CVSS2

Дефекты

CWE-79

Связанные уязвимости

CVE-2013-6858

ubuntu

больше 12 лет назад

CVE-2013-6858

redhat

больше 12 лет назад

CVE-2013-6858

debian

больше 12 лет назад

Multiple cross-site scripting (XSS) vulnerabilities in OpenStack Dashb ...

GHSA-q74p-53hj-4w6q

github

около 4 лет назад

EPSS

Процентиль: 76%

0.01734

Низкий

4.3 Medium

CVSS2

Дефекты

CWE-79