CVE-2014-3594

Currently unrated

Key Information:

Vendor
Openstack
Status
Horizon
Vendor
CVE Published:
22 August 2014

Summary

Cross-site scripting (XSS) vulnerability in the Host Aggregates interface in OpenStack Dashboard (Horizon) before 2013.2.4, 2014.1 before 2014.1.2, and Juno before Juno-3 allows remote administrators to inject arbitrary web script or HTML via a new host aggregate name.

References

http://rhn.redhat.com/errata/RHSA-2014-1336.html
vendor-advisoryx_refsource_REDHAT
http://www.securityfocus.com/bid/69291
vdb-entryx_refsource_BID
https://review.openstack.org/#/c/115313/
x_refsource_CONFIRM

Timeline

  • Vulnerability published

  • Vulnerability Reserved

.