Cross-Site Scripting Vulnerability in OpenStack Dashboard by OpenStack
CVE-2014-3475

Currently unrated

Key Information:

Vendor
Openstack
Status
Horizon
Vendor
CVE Published:
31 October 2014

Summary

A cross-site scripting (XSS) vulnerability exists in the Users panel of OpenStack Dashboard (Horizon) allowing remote administrators to inject arbitrary web scripts or HTML through user email addresses. This flaw affects various versions of Horizon prior to specific updates, creating a potential risk for administrator accounts and applications connected to the OpenStack environment.

References

http://www.securityfocus.com/bid/68456
vdb-entryx_refsource_BID
https://bugs.launchpad.net/horizon/+bug/1320235
x_refsource_CONFIRM
http://www.openwall.com/lists/oss-security/2014/07/08/6
mailing-listx_refsource_MLIST

Timeline

  • Vulnerability published

  • Vulnerability Reserved

.