p PatchFirst

CVE-2013-6858

CVE-2013-6858

This page contains facts from public vulnerability sources. Check the original advisory before updating.

Multiple cross-site scripting (XSS) vulnerabilities in OpenStack Dashboard (Horizon) 2013.2 and earlier allow local users to inject arbitrary web script or HTML via an instance name to (1) "Volumes" or (2) "Network Topology" page.

EPSS 1.7% · Fix available

Published
Updated

Stack: system

Affected products and versions

  • n/a

    Versions
    • n/a: Affected

    No fix published

  • horizon Debian:12

    Affected ranges
    • ECOSYSTEM: < 2013.2-2

    Update to 2013.2-2

  • horizon Debian:13

    Affected ranges
    • ECOSYSTEM: < 2013.2-2

    Update to 2013.2-2

  • horizon Debian:14

    Affected ranges
    • ECOSYSTEM: < 2013.2-2

    Update to 2013.2-2

Original sources

Check your server →