CVE-2016-6519
Published: 21 April 2017
Cross-site scripting (XSS) vulnerability in the "Shares" overview in Openstack Manila before 2.5.1 allows remote authenticated users to inject arbitrary web script or HTML via the Metadata field in the "Create Share" form.
Priority
Status
| Package | Release | Status |
|---|---|---|
|
manila-ui Launchpad, Ubuntu, Debian |
artful |
Ignored
(end of life)
|
| bionic |
Not vulnerable
(2.5.1-0)
|
|
| cosmic |
Not vulnerable
(2.5.1-0)
|
|
| disco |
Not vulnerable
(2.5.1-0)
|
|
| eoan |
Not vulnerable
(2.5.1-0)
|
|
| focal |
Not vulnerable
(2.5.1-0)
|
|
| groovy |
Not vulnerable
(2.5.1-0)
|
|
| hirsute |
Not vulnerable
(2.5.1-0)
|
|
| impish |
Not vulnerable
(2.5.1-0)
|
|
| jammy |
Not vulnerable
(2.5.1-0)
|
|
| kinetic |
Not vulnerable
(2.5.1-0)
|
|
| lunar |
Not vulnerable
(2.5.1-0)
|
|
| mantic |
Not vulnerable
(2.5.1-0)
|
|
| precise |
Does not exist
|
|
| trusty |
Does not exist
|
|
| upstream |
Needed
|
|
| xenial |
Needed
|
|
| yakkety |
Ignored
(end of life)
|
|
| zesty |
Ignored
(end of life)
|
Severity score breakdown
| Parameter | Value |
|---|---|
| Base score | 5.4 |
| Attack vector | Network |
| Attack complexity | Low |
| Privileges required | Low |
| User interaction | Required |
| Scope | Changed |
| Confidentiality | Low |
| Integrity impact | Low |
| Availability impact | None |
| Vector | CVSS:3.0/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N |