Cette page suit l'état du correctif pour Debian. La vulnérabilité elle-même est décrite sur la page CVE principale. Voir CVE-2016-6519 →

DEBIAN-CVE-2016-6519

Cross-site scripting (XSS) vulnerability in the "Shares" overview in Openstack Manila before 2.5.1 allows remote authenticated users to inject arbitra...

Description d'origine

La description telle que publiée par la source (souvent en anglais).

Cross-site scripting (XSS) vulnerability in the "Shares" overview in Openstack Manila before 2.5.1 allows remote authenticated users to inject arbitrary web script or HTML via the Metadata field in the "Create Share" form.

Source: OSV.dev (Open Source Vulnerabilities) OSV

Paquets affectés

Debian:12 manila-ui

[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.5.1-0"}]}]

Debian:13 manila-ui

[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.5.1-0"}]}]

Debian:14 manila-ui

[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.5.1-0"}]}]

Références

advisory security-tracker.debian.org