CVE-2014-8578

낮음 3.5CVE-2014-8578 · Published 31/10/2014 · updated 17/06/2026

요약

CVE-2014-8578은(는) horizon (openstack)에 영향을 주는 낮음 (CVSS 3.5) 취약점입니다.
향후 30일 내 악용 확률(EPSS): 1.2%, 전체 취약점의 67.7%보다 높음.
조치: 2013.2.4, 2014.1.2 이상으로 업데이트하세요.

Package	Affected versions	Patched versions
horizon openstack	`= juno-1≥ 2013.2, < 2013.2.4≥ 2014.1, < 2014.1.2≤ juno-1`	`2013.2.42014.1.2`

Description

Cross-site scripting (XSS) vulnerability in the Groups panel in OpenStack Dashboard (Horizon) before 2013.2.4, 2014.1 before 2014.1.2, and Juno before Juno-2 allows remote administrators to inject arbitrary web script or HTML via a user email address, a different vulnerability than CVE-2014-3475.

References

openwall.com/lists/oss-security/2014/07/08/6 · Mailing List
securityfocus.com/bid/68456 · Third Party Advisory
bugs.launchpad.net/horizon/+bug/1320235 · Issue Tracking

horizon의 다른 취약점

모두 보기 →

Running one of these products? Scan your site to see whether it exposes a vulnerable version.

Scan my site free

Package

Affected versions

Patched versions

horizon

openstack

= juno-1≥ 2013.2, < 2013.2.4≥ 2014.1, < 2014.1.2≤ juno-1

2013.2.42014.1.2

horizon의 다른 취약점

모두 보기 →