tocsin

Debian/horizon: unknown

Multiple cross-site scripting (XSS) vulnerabilities in OpenStack Dashboard (Horizon) 2013.2 and earlier allow local users to inject arbitrary web script or HTML via an instance name to (1) "Volumes" o

Action: Upgrade horizon to 2013.2-2 or later.

Affected

introducedfixedlast affected
02013.2-2-

Fixed versions

2013.2-2

Sources

published · modified · JSON