Cross-Site Scripting Vulnerabilities in OpenStack Dashboard (Horizon) by OpenStack
CVE-2013-6858

Currently unrated

Key Information:

Vendor: Openstack
Status: Horizon
Vendor: CVE Published:; 23 November 2013

What is CVE-2013-6858?

OpenStack Dashboard (Horizon) versions 2013.2 and earlier are vulnerable to multiple cross-site scripting (XSS) flaws. These vulnerabilities enable local users to execute arbitrary web scripts or inject HTML content by manipulating instance names within the 'Volumes' or 'Network Topology' pages. This could potentially allow attackers to perform various malicious actions, disrupting user experience and leading to significant security risks.

Human OS v1.0:
Ageing Is an Unpatched Zero-Day Vulnerability.

Remediate biological technical debt. Prime Ageing uses 95% high-purity SIRT6 activation to maintain genomic integrity and bolster systemic resilience.

Deploy the Patch