GitHub Advisoryadvisory · PyPI

GHSA-vq76-5ghr-9p4v Openstack Manila Persistent XSS in Metadata field

MEDIUM Published 2022-05-13 Modified 2024-05-14 Official page ↗
Aliases
CVE-2016-6519
Ecosystem
PyPI
Packages
manila-ui
Severity
Moderate
CVSS vector
CVSS:3.0/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N
Weaknesses
CWE-79
Reviewed
2024-05-14

Affected packages

• PyPI manila-ui: < 2.5.1 → fixed in 2.5.1

Description

Cross-site scripting (XSS) vulnerability in the "Shares" overview in Openstack Manila before 2.5.1 allows remote authenticated users to inject arbitrary web script or HTML via the Metadata field in the "Create Share" form.

Related

Alias · CVE (1)

  • CVE-2016-6519 Cross-site scripting (XSS) vulnerability in the "Shares" overview in Openstack Manila before 2.5.1 allows remote authenticated users to… vulnerability

Weakness · CWE (1)

  • CWE-79 Improper Neutralization of Input During Web Page Generation weakness

References