Summary: | <www-apps/horizon-2013.1.4-r1: multiple XSS vulnerabilities (CVE-2013-6858) | ||
---|---|---|---|
Product: | Gentoo Security | Reporter: | Agostino Sarubbo <ago> |
Component: | Vulnerabilities | Assignee: | Gentoo Security <security> |
Status: | RESOLVED FIXED | ||
Severity: | trivial | CC: | python |
Priority: | Normal | ||
Version: | unspecified | ||
Hardware: | All | ||
OS: | Linux | ||
URL: | https://bugzilla.redhat.com/show_bug.cgi?id=1034153 | ||
Whiteboard: | ~4 [noglsa] | ||
Package list: | Runtime testing required: | --- |
Description
Agostino Sarubbo
![]() CVE-2013-6858 (http://nvd.nist.gov/nvd.cfm?cvename=CVE-2013-6858): Multiple cross-site scripting (XSS) vulnerabilities in OpenStack Dashboard (Horizon) 2013.2 and earlier allow local users to inject arbitrary web script or HTML via an instance name to (1) "Volumes" or (2) "Network Topology" page. looks like I already fixed this in tree (horizon-2013.1.4-r1.ebuild) Already Cleaned up... Thank you. No GLSA needed as no stable versions available. Thank you for your work |