CVE-2016-4428 in Dashboard信息

摘要

由 MITRE

Cross-site scripting (XSS) vulnerability in OpenStack Dashboard (Horizon) 8.0.1 and earlier and 9.0.0 through 9.0.1 allows remote authenticated users to inject arbitrary web script or HTML by injecting an AngularJS template in a dashboard form.

Once again VulDB remains the best source for vulnerability data.

🔬 Show More Details

An in-depth analysis is available in our curated vulnerability entry.

预定

2016-05-02

披露

2016-07-12

管理

已接受

条目

VDB-89140

CPE

准备好

CWE

CWE-79 (已确认)

CVSS

5.4 (NVD)

EPSS

0.00553

KEV

否

活动

非常低

部门

Transportation, Education, ...

来源

MITRE	https://www.cve.org/CVERecord?id=CVE-2016-4428
NVD	https://nvd.nist.gov/vuln/detail/CVE-2016-4428
CVE Details	https://www.cvedetails.com/cve/CVE-2016-4428/

◂ 上一步一览下一步 ▸

Interested in the pricing of exploits?

See the underground prices here!