OpenStack Dashboard (Horizon) Cross-site scripting (XSS) vulnerability in the Host Aggregates interface
Cross-site scripting (XSS) vulnerability in the Host Aggregates interface in OpenStack Dashboard (Horizon) before 2013.2.4, 2014.1 before 2014.1.2, and Juno before Juno-3 allows remote administrators to inject arbitrary web script or HTML via a new host aggregate name.
01
beschreibt (1)
Zugehörige CVEs.
| ID | Schweregrad | ausnutzbar | ||
|---|---|---|---|---|
| CVE-2014-3594US | low3.5 | — | ||
Cross-site scripting (XSS) vulnerability in the Host Aggregates interface in OpenStack Dashboard (Horizon) before 2013.2.4, 2014.1 before 2014.1.2, and Juno before Juno-3 allows re… | ||||
02
Referenzen
Externe Belege — Patches, Meldungen, Analysen.
- http://lists.opensuse.org/opensuse-updates/2015-01/msg00040.htmlWEB
- http://rhn.redhat.com/errata/RHSA-2014-1335.htmlWEB
- http://rhn.redhat.com/errata/RHSA-2014-1336.htmlWEB
- http://seclists.org/oss-sec/2014/q3/413WEB
- http://www.securityfocus.com/bid/69291WEB
- https://access.redhat.com/errata/RHSA-2014:1188WEB
- https://access.redhat.com/errata/RHSA-2014:1335WEB
- https://access.redhat.com/errata/RHSA-2014:1336WEB
scry
Advisories wie diese benennen die exponierten Produkte, die Angreifer auf Ihrer Angriffsfläche ins Visier nehmen. Sehen Sie mit einem kostenlosen Passiv-Scan, was exponiert ist.
Kostenloser Scan