Bug 1376642

Summary:	CVE-2016-6519 openstack-manila-ui: persistent XSS in metadata field [openstack-rdo]
Product:	[Community] RDO	Reporter:	Summer Long <slong>
Component:	distribution	Assignee:	Lars Kellogg-Stedman <lars>
Status:	CLOSED ERRATA	QA Contact:	Shai Revivo <srevivo>
Severity:	medium	Docs Contact:
Priority:	medium
Version:	unspecified	CC:	aortega, apevec, ayoung, chris.brown, chrisw, cvsbot-xmlrpc, jschluet, kbasil, lhh, lpeer, markmc, rbryant, sclewis, srevivo, tdecacqu
Target Milestone:	---	Keywords:	Security, SecurityTracking
Target Release:	trunk
Hardware:	All
OS:	Linux
Whiteboard:	component:openstack-manila-ui
Fixed In Version:		Doc Type:	Release Note
Doc Text:		Story Points:	---
Clone Of:		Environment:
Last Closed:	2017-06-18 13:51:56 UTC	Type:	---
Regression:	---	Mount Type:	---
Documentation:	---	CRM:
Verified Versions:		Category:	---
oVirt Team:	---	RHEL 7.3 requirements from Atomic Host:
Cloudforms Team:	---	Target Upstream Version:
Bug Depends On:
Bug Blocks:	1375147

Description Summer Long 2016-09-16 03:28:02 UTC

This as an RDO Project security tracking bug against openstack-manila-ui. It was created
to ensure that one or more security vulnerabilities are fixed.

For comments that are specific to the vulnerability please use bugs filed
against the "Security Response" product referenced in the "Blocks" field.

[bug automatically created by: add-tracking-bugs]

Comment 1 Christopher Brown 2017-06-18 13:51:56 UTC

Addressed in all versions last year.