CVE-2012-2094

Publication date 17 April 2012

Last updated 24 July 2024

Ubuntu priority

Medium

Why this priority?

Cross-site scripting (XSS) vulnerability in the refresh mechanism in the log viewer in horizon/static/horizon/js/horizon.js in OpenStack Dashboard (Horizon) folsom-1 and 2012.1 and earlier allows remote attackers to inject arbitrary web script or HTML via the guest console.

Status

Package Ubuntu Release Status
horizon 12.04 LTS precise
Fixed 2012.1-0ubuntu8.1
11.10 oneiric Not in release
11.04 natty Not in release
10.04 LTS lucid Not in release
8.04 LTS hardy Not in release

References

Related Ubuntu Security Notices (USN)

Other references