QwikSec

Security Database

CVE

CWE

Training

CVE-2012-2094

Published: Jun 5, 2012

Modified: Aug 6, 2024

PUBLISHED

Description

Cross-site scripting (XSS) vulnerability in the refresh mechanism in the log viewer in horizon/static/horizon/js/horizon.js in OpenStack Dashboard (Horizon) folsom-1 and 2012.1 and earlier allows remote attackers to inject arbitrary web script or HTML via the guest console.

Vendor	Product	Versions
n/a	n/a	affected `n/a`

References

third-party-advisory

x_refsource_SECUNIA

openstack-horizon-xss(76136)

vdb-entry

x_refsource_XF

vdb-entry

x_refsource_OSVDB

vendor-advisory

x_refsource_UBUNTU

https://bugs.launchpad.net/horizon/+bug/977944

x_refsource_MISC

third-party-advisory

x_refsource_SECUNIA

FEDORA-2012-6108

vendor-advisory

x_refsource_FEDORA

[openstack] 20120417 [OSSA 2012-004] XSS vulnerability in Horizon log viewer

mailing-list

x_refsource_MLIST

https://github.com/openstack/horizon/commit/7f8c788aa70db98ac904f37fa4197fcabb802942

x_refsource_CONFIRM

Security Training

Train your team to recognize and prevent security threats with our comprehensive security awareness program.

Vulnerability Scanning

Discover vulnerabilities in your applications and infrastructure before attackers do.