CVE-2013-6858
Fixed in a distro release EPSS 2%
Multiple cross-site scripting (XSS) vulnerabilities in OpenStack Dashboard (Horizon) 2013.2 and earlier allow local users to inject arbitrary web script or HTML via an instance name to (1) "Volumes" or (2) "Network Topology" page.
Products: openstack horizon, opensuse, canonical ubuntu_linux
Distro releases
| Release | Package | Fixed in |
|---|---|---|
| Debian 12 | horizon | 2013.2-2 |
| Debian 13 | horizon | 2013.2-2 |
| Debian 14 | horizon | 2013.2-2 |
| Red Hat openstack 3 | openstack-dashboard | 0:2013.1.5-1.el6ost |
| Red Hat openstack 3 | python-django-horizon | 0:2013.1.5-1.el6ost |
| Red Hat openstack 3 | python-django-horizon-doc | 0:2013.1.5-1.el6ost |