Lucene search

PRIOn knowledge basePRION:CVE-2014-3594

HistoryAug 22, 2014 - 2:55 p.m.

Cross site scripting

2014-08-2214:55:00

PRIOn knowledge base

www.prio-n.com

5.9 Medium

AI Score

Confidence

High

0.001 Low

EPSS

Percentile

48.3%

JSON

Cross-site scripting (XSS) vulnerability in the Host Aggregates interface in OpenStack Dashboard (Horizon) before 2013.2.4, 2014.1 before 2014.1.2, and Juno before Juno-3 allows remote administrators to inject arbitrary web script or HTML via a new host aggregate name.

CPENameOperatorVersion
horizoneqjuno-1
horizoneqjuno-2
horizonge2013.2
horizonlt2013.2.4
horizonge2014.1
horizonlt2014.1.2
opensuseeq13.1

Name	Operator	Version
horizon	eq	juno-1
horizon	eq	juno-2
horizon	ge	2013.2
horizon	lt	2013.2.4
horizon	ge	2014.1
horizon	lt	2014.1.2
opensuse	eq	13.1

References

lists.opensuse.org/opensuse-updates/2015-01/msg00040.html

rhn.redhat.com/errata/RHSA-2014-1335.html

rhn.redhat.com/errata/RHSA-2014-1336.html

seclists.org/oss-sec/2014/q3/413

www.securityfocus.com/bid/69291

bugs.launchpad.net/horizon/+bug/1349491

exchange.xforce.ibmcloud.com/vulnerabilities/95378

review.openstack.org/