Security Advisories
CVEs affecting projects tracked on Release Alert, from NVD & OSV.
CVE-2015-3988
3.5
LOWCVSS v2
Published
May 19, 2015
Affected
1 project
Assigned by
MITRE
Severity scale
010
Description
Multiple cross-site scripting (XSS) vulnerabilities in OpenStack Dashboard (Horizon) 2015.1.0 allow remote authenticated users to inject arbitrary web script or HTML via the metadata to a (1) Glance image, (2) Nova flavor or (3) Host Aggregate.
openstack/horizon
GitHubOpenStack Dashboard (Horizon). Mirror of code maintained at opendev.org.
GitHubOpenStack Dashboard (Horizon). Mirror of code maintained at opendev.org.= 2015.1.0NVD