CVE-2014-0157
CVE-2014-0157
This page contains facts from public vulnerability sources. Check the original advisory before updating.
Cross-site scripting (XSS) vulnerability in the Horizon Orchestration dashboard in OpenStack Dashboard (aka Horizon) 2013.2 before 2013.2.4 and icehouse before icehouse-rc2 allows remote attackers to inject arbitrary web script or HTML via the description field of a Heat template.
CVSS 5.1 · Medium · EPSS 1.2% · Fix available
- Published
- Updated
Affected products and versions
n/a
- Versions
- n/a: Affected
No fix published
horizon Debian:12
- Affected ranges
- ECOSYSTEM: < 2013.2.3-1
Update to 2013.2.3-1
horizon Debian:13
- Affected ranges
- ECOSYSTEM: < 2013.2.3-1
Update to 2013.2.3-1
horizon Debian:14
- Affected ranges
- ECOSYSTEM: < 2013.2.3-1
Update to 2013.2.3-1
horizon PyPI
- Affected ranges
- ECOSYSTEM: ≥ 2013.2, < 2013.2.4
Update to 2013.2.4