PT-2014-8627

CVE-2014-8578

·

Published

2014-08-21

·

Updated

2021-03-09

Description by

CVSS 2.0
3.5
Low
MetricsAV:N/AC:M/Au:S/C:N/I:P/A:N
Name of the Vulnerable Software and Affected Versions OpenStack Dashboard (Horizon) versions prior to 2013.2.4 OpenStack Dashboard (Horizon) versions 2014.1 prior to 2014.1.2 OpenStack Dashboard (Horizon) Juno versions prior to Juno-2
Description A cross-site scripting (XSS) issue exists in the Groups panel, allowing remote administrators to inject arbitrary web script or HTML via a user email address.
Recommendations For versions prior to 2013.2.4, update to version 2013.2.4 or later. For versions 2014.1 prior to 2014.1.2, update to version 2014.1.2 or later. For Juno versions prior to Juno-2, update to Juno-2 or later.
Exploitability
Fix
Impacts
Vendors
Affected products
Weakness enumeration
CWE-79: Improper Neutralization of Input During Web Page Generation (\'Cross-site Scripting\')
Related identifiers
CVE-2014-8578
RHSA-2014:0939
RHSA-2014:1188
USN-2323-1
Found an issue in the description? Have something to add? Feel free to write us 👾
dbugs@ptsecurity.com