CVSS2
Attack Vector
NETWORK
Attack Complexity
MEDIUM
Authentication
NONE
Confidentiality Impact
NONE
Integrity Impact
PARTIAL
Availability Impact
NONE
AV:N/AC:M/Au:N/C:N/I:P/A:N
EPSS
Percentile
50.3%
Cross-site scripting (XSS) vulnerability in the Orchestration/Stack section
in the Horizon Orchestration dashboard in OpenStack Dashboard (Horizon)
before 2013.2.4, 2014.1 before 2014.1.2, and Juno before Juno-2, when used
with Heat, allows remote Orchestration template owners or catalogs to
inject arbitrary web script or HTML via a crafted template.
Author | Note |
---|---|
mdeslaur | introduced by: https://review.openstack.org/gitweb?p=openstack/horizon.git;h=8914ed95 |