CVE-2014-8578

2014-10-3115:55:00

Debian Security Bug Tracker

security-tracker.debian.org

0.001 Low

EPSS

Percentile

37.3%

JSON

Cross-site scripting (XSS) vulnerability in the Groups panel in OpenStack Dashboard (Horizon) before 2013.2.4, 2014.1 before 2014.1.2, and Juno before Juno-2 allows remote administrators to inject arbitrary web script or HTML via a user email address, a different vulnerability than CVE-2014-3475.

OSVersionArchitecturePackageVersionFilename
Debian12allhorizon< 2014.1.1-3horizon_2014.1.1-3_all.deb
Debian11allhorizon< 2014.1.1-3horizon_2014.1.1-3_all.deb
Debian10allhorizon< 2014.1.1-3horizon_2014.1.1-3_all.deb
Debian999allhorizon< 2014.1.1-3horizon_2014.1.1-3_all.deb
Debian13allhorizon< 2014.1.1-3horizon_2014.1.1-3_all.deb

OS	Version	Architecture	Package	Version	Filename
Debian	12	all	horizon	< 2014.1.1-3	horizon_2014.1.1-3_all.deb
Debian	11	all	horizon	< 2014.1.1-3	horizon_2014.1.1-3_all.deb
Debian	10	all	horizon	< 2014.1.1-3	horizon_2014.1.1-3_all.deb
Debian	999	all	horizon	< 2014.1.1-3	horizon_2014.1.1-3_all.deb
Debian	13	all	horizon	< 2014.1.1-3	horizon_2014.1.1-3_all.deb

0.001 Low

EPSS

Percentile

37.3%

JSON

Related for DEBIANCVE:CVE-2014-8578