tocsin

Debian/horizon: unknown

Cross-site scripting (XSS) vulnerability in the Orchestration/Stack section in OpenStack Dashboard (Horizon) 2014.2 before 2014.2.4 and 2015.1.x before 2015.1.1 allows remote attackers to inject arbit

Action: Upgrade horizon to 2015.1.0+2015.06.09.git15.e63af6c598-1 or later.

Affected

introducedfixedlast affected
02015.1.0+2015.06.09.git15.e63af6c598-1-

Fixed versions

2015.1.0+2015.06.09.git15.e63af6c598-1

Sources

published · modified · JSON