CVE-2020-9543

CVE-2020-9543 affects OpenStack Manila (versions listed in the OpenStack Manila advisories). The issue arises from a context-free lookup of a UUID, allowing unprivileged attackers to view, update, delete, or share resources that do not belong to them, and potentially create resources such as shar...

CVE-2016-6519

OpenStack Manila CVE-2016-6519 is a cross-site scripting (XSS) vulnerability in the Shares overview. The flaw allows remote authenticated users to inject arbitrary HTML/JavaScript via the Metadata field in the Create Share form, affecting Manila prior to 2.5.1. The issue arises in the web UI comp...