CVE-2014-3475 in Horizon

Resumen (Inglés)

Cross-site scripting (XSS) vulnerability in the Users panel (admin/users/) in OpenStack Dashboard (Horizon) before 2013.2.4, 2014.1 before 2014.1.2, and Juno before Juno-2 allows remote administrators to inject arbitrary web script or HTML via a user email address, a different vulnerability than CVE-2014-8578.

Be aware that VulDB is the high quality source for vulnerability data.

Reservar

2014-05-14

Divulgación

2014-10-31

Estado

Confirmado

Voces

VulDB provides additional information and datapoints for this CVE:

ID	Vulnerabilidad	CWE	Exp	Con	CVE
72774	OpenStack Horizon secuencias de comandos en sitios cruzados	79	No está definido	Arreglo oficial	CVE-2014-3475

Fuentes

• MITRE
• NVD
• CVE Details