CVE-2012-2094

EUVD-2012-0010
Cross-site scripting (XSS) vulnerability in the refresh mechanism in the log viewer in horizon/static/horizon/js/horizon.js in OpenStack Dashboard (Horizon) folsom-1 and 2012.1 and earlier allows remote attackers to inject arbitrary web script or HTML via the guest console.
Cross-site Scripting
ProviderTypeBase ScoreAtk. VectorAtk. ComplexityPriv. RequiredVector
NISTPrimary
4.3 UNKNOWN
NETWORK
MEDIUM
AV:N/AC:M/Au:N/C:N/I:P/A:N
Base Score
CVSS 3.x
EPSS Score
Percentile: 79%
Affected Products (NVD)
VendorProductVersion
openstackhorizon
2012.1
𝑥
= Vulnerable software versions
Debian logo
Debian Releases
Debian Product
Codename
horizon
bookworm
3:23.0.0-5+deb12u1
fixed
bullseye
3:18.6.2-5+deb11u2
fixed
sid
3:25.1.0-2
fixed
trixie
3:25.1.0-2
fixed
Ubuntu logo
Ubuntu Releases
Ubuntu Product
Codename
horizon
hardy
dne
lucid
dne
natty
dne
oneiric
dne
precise
Fixed 2012.1-0ubuntu8.1
released
Common Weakness Enumeration
References
http://lists.fedoraproject.org/pipermail/package-announce/2012-April/079160.html
http://secunia.com/advisories/49024
http://secunia.com/advisories/49071
http://ubuntu.com/usn/usn-1439-1
http://www.osvdb.org/81742
https://bugs.launchpad.net/horizon/+bug/977944
https://exchange.xforce.ibmcloud.com/vulnerabilities/76136
https://github.com/openstack/horizon/commit/7f8c788aa70db98ac904f37fa4197fcabb802942
https://lists.launchpad.net/openstack/msg10211.html
http://lists.fedoraproject.org/pipermail/package-announce/2012-April/079160.html
http://secunia.com/advisories/49024
http://secunia.com/advisories/49071
http://ubuntu.com/usn/usn-1439-1
http://www.osvdb.org/81742
https://bugs.launchpad.net/horizon/+bug/977944
https://exchange.xforce.ibmcloud.com/vulnerabilities/76136
https://github.com/openstack/horizon/commit/7f8c788aa70db98ac904f37fa4197fcabb802942
https://lists.launchpad.net/openstack/msg10211.html