OSSA-2015-009: Persistent XSS in Horizon metadata dashboard

OSSA-2015-009: Persistent XSS in Horizon metadata dashboard

Date

May 25, 2015

CVE

CVE-2015-3988

Affects

  • Horizon: 2014.2 versions through 2014.2.3 and version 2015.1.0

Description

Sunil Yadav from IBM Security Services reported a persistent XSS in Horizon. An authenticated user may conduct a persistent XSS attack by setting a malicious metadata to a Glance image, a Nova flavor or a Host Aggregate and tricking an administrator to load the update metadata page. Once executed in a legitimate context this attack may result in a privilege escalation. All Horizon setups are affected.

Credits

  • Sunil Yadav from IBM (CVE-2015-3988)

Notes

  • This fix will be included in future 2014.2.4 (juno) and 2015.1.1 (kilo) releases.

Creative Commons Attribution 3.0 License

Except where otherwise noted, this document is licensed under Creative Commons Attribution 3.0 License. See all OpenStack Legal Documents.