CVE-2014-8578

BAJO 3.5CVE-2014-8578 · Published 31/10/2014 · updated 17/06/2026

En resumen

CVE-2014-8578 es una vulnerabilidad BAJO (CVSS 3.5) que afecta a horizon (openstack).
Probabilidad de explotación en los próximos 30 días (EPSS): 1.2%, mayor que el 67.7% de las vulnerabilidades.
Solución: actualizar a 2013.2.4, 2014.1.2 o posterior.

Package	Affected versions	Patched versions
horizon openstack	`= juno-1≥ 2013.2, < 2013.2.4≥ 2014.1, < 2014.1.2≤ juno-1`	`2013.2.42014.1.2`

Description

Cross-site scripting (XSS) vulnerability in the Groups panel in OpenStack Dashboard (Horizon) before 2013.2.4, 2014.1 before 2014.1.2, and Juno before Juno-2 allows remote administrators to inject arbitrary web script or HTML via a user email address, a different vulnerability than CVE-2014-3475.

References

openwall.com/lists/oss-security/2014/07/08/6 · Mailing List
securityfocus.com/bid/68456 · Third Party Advisory
bugs.launchpad.net/horizon/+bug/1320235 · Issue Tracking

Más vulnerabilidades de horizon

Ver todo →

Running one of these products? Scan your site to see whether it exposes a vulnerable version.

Scan my site free

Package

Affected versions

Patched versions

horizon

openstack

= juno-1≥ 2013.2, < 2013.2.4≥ 2014.1, < 2014.1.2≤ juno-1

2013.2.42014.1.2

Más vulnerabilidades de horizon

Ver todo →