CVE-2015-3988

Multiple cross-site scripting (XSS) vulnerabilities in OpenStack Dashboard (Horizon) 2015.1.0 allow remote authenticated users to inject arbitrary web script or HTML via the metadata to a (1) Glance image, (2) Nova flavor or (3) Host Aggregate.
Configurations

Configuration 1 (hide)

cpe:2.3:a:openstack:horizon:2015.1.0:*:*:*:*:*:*:*

Configuration 2 (hide)

cpe:2.3:o:oracle:solaris:11.2:*:*:*:*:*:*:*

History

No history.

Information

Published : 2015-05-19 18:59

Updated : 2024-02-04 18:53


NVD link : CVE-2015-3988

Mitre link : CVE-2015-3988

CVE.ORG link : CVE-2015-3988


JSON object : View

Products Affected

oracle

  • solaris

openstack

  • horizon
CWE
CWE-79

Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')