Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

redhat логотип

CVE-2013-6858

Опубликовано: 23 нояб. 2013
Источник: redhat
CVSS2: 4.3

Описание

Multiple cross-site scripting (XSS) vulnerabilities in OpenStack Dashboard (Horizon) 2013.2 and earlier allow local users to inject arbitrary web script or HTML via an instance name to (1) "Volumes" or (2) "Network Topology" page.

Затронутые пакеты

ПлатформаПакетСостояниеРекомендацияРелиз
Red Hat OpenStack Platform 4python-django-horizonAffected
OpenStack 3 for RHEL 6python-django-horizonFixedRHSA-2014:036503.04.2014

Показывать по

Ссылки на источники

Дополнительная информация

Статус:

Moderate
Дефект:
CWE-79
https://bugzilla.redhat.com/show_bug.cgi?id=1034153openstack: horizon multiple XSS vulnerabilities.

4.3 Medium

CVSS2

Связанные уязвимости

ubuntu логотип

CVE-2013-6858

ubuntu
около 12 лет назад

Multiple cross-site scripting (XSS) vulnerabilities in OpenStack Dashboard (Horizon) 2013.2 and earlier allow local users to inject arbitrary web script or HTML via an instance name to (1) "Volumes" or (2) "Network Topology" page.

nvd логотип

CVE-2013-6858

nvd
около 12 лет назад

Multiple cross-site scripting (XSS) vulnerabilities in OpenStack Dashboard (Horizon) 2013.2 and earlier allow local users to inject arbitrary web script or HTML via an instance name to (1) "Volumes" or (2) "Network Topology" page.

debian логотип

CVE-2013-6858

debian
около 12 лет назад

Multiple cross-site scripting (XSS) vulnerabilities in OpenStack Dashb ...

github логотип

GHSA-q74p-53hj-4w6q

github
больше 3 лет назад

Multiple cross-site scripting (XSS) vulnerabilities in OpenStack Dashboard (Horizon) 2013.2 and earlier allow local users to inject arbitrary web script or HTML via an instance name to (1) "Volumes" or (2) "Network Topology" page.

4.3 Medium

CVSS2