Multiple XSS vulnerabilities were reported in OpenStack Horizon:

Jason Hullinger from Hewlett Packard, Craig Lorentzen from Cisco and Michael Xin from Rackspace reported 3 cross-site scripting (XSS) vulnerabilities in Horizon. A malicious Orchestration template owner or catalog may conduct an XSS attack once a corrupted template is used in the Orchestration/Stack section of Horizon (CVE-2014-3473). A malicious Horizon user may store an XSS attack by creating a network with a corrupted name (CVE-2014-3474). A malicious Horizon administrator may store an XSS attack by creating a user with a corrupted email address (CVE-2014-3475). Once executed in a legitimate context these attacks may result in potential asset stealing (horizon user/admin access credentials, VMs/Network configuration/management, tenants' confidential information, etc.). All Horizon setups are affected.


Acknowledgements CVE-2014-3473:

Red Hat would like to thank the OpenStack project for reporting this issue. Upstream acknowledges Jason Hullinger from Hewlett Packard as the original reporter.


Acknowledgements CVE-2014-3474:

Red Hat would like to thank the OpenStack project for reporting this issue. Upstream acknowledges Craig Lorentzen from Cisco as the original reporter.


Acknowledgements CVE-2014-3475:

Red Hat would like to thank the OpenStack project for reporting this issue. Upstream acknowledges Michael Xin from Rackspace as the original reporter.