Staging Environment: Content and features may be unstable or change without notice.
Advisory details: pysec / PYSEC-2012-32
Advisory ID pysec/PYSEC-2012-32
Aliases CVE-2012-2094
GHSA-j772-hpmw-32rm
Summary Cross-site scripting (XSS) vulnerability in the refresh mechanism in the log viewer in horizon/static/horizon/js/horizon.js in OpenStack Dashboard (Horizon) folsom-1 and 2012.1 and earlier allows remote attackers to inject arbitrary web script or HTML via the guest console.
Status Published
Exploitability 0.5
Weighted Severity 0.0
Risk
Affected and Fixed Packages Package Details
Introduced and Fixed Package Commit Patches Package Commit Patches Details
Weaknesses (0)
There are no known CWE.
System Score Found at
There are no known severity scores.
Reference id Reference type URL
http://lists.fedoraproject.org/pipermail/package-announce/2012-April/079160.html
https://bugs.launchpad.net/horizon/+bug/977944
http://secunia.com/advisories/49024
http://secunia.com/advisories/49071
https://exchange.xforce.ibmcloud.com/vulnerabilities/76136
https://github.com/openstack/horizon/commit/7f8c788aa70db98ac904f37fa4197fcabb802942
https://lists.launchpad.net/openstack/msg10211.html
http://ubuntu.com/usn/usn-1439-1
http://www.osvdb.org/81742
GHSA-j772-hpmw-32rm https://github.com/advisories/GHSA-j772-hpmw-32rm

No exploits are available.

No EPSS data available for this advisory.

Patch URL
There are no known patches.

There are no known vectors.

There are no SSVC decisions available.