PT-2015-6374
CVE-2015-3988
·
تاريخ النشر
2015-05-19
·
تاريخ التحديث
2016-12-24
الوصف من
CVSS 2.0
3.5
منخفضةالمقاييسAV:N/AC:M/Au:S/C:N/I:P/A:N
Name of the Vulnerable Software and Affected Versions
OpenStack Dashboard (Horizon) version 2015.1.0
Description
The issue allows remote authenticated users to inject arbitrary web script or HTML via metadata to various components, including a Glance image, Nova flavor, or Host Aggregate.
Recommendations
For OpenStack Dashboard (Horizon) version 2015.1.0, update to a version that addresses the XSS vulnerabilities to prevent remote authenticated users from injecting arbitrary web script or HTML.
وجدت خطأً في الوصف؟ لديك ما تضيفه؟ لا تتردد في مراسلتنا 👾