Please Install the Updated Packages.

Cristian Fiorentino discovered that OpenStack Horizon did not properly perform input sanitization for Heat templates. If a user were tricked into using a specially crafted Heat template, an attacker could conduct cross-site scripting attacks. With cross-site scripting vulnerabilities, if a user were tricked into viewing server output during a crafted server request, a remote attacker could exploit this to modify the contents, or steal confidential data, within the same domain.

horizon on Ubuntu 13.10

• https://lists.ubuntu.com/archives/ubuntu-security-announce/2014-May/002505.html

---

Updated on 2015-03-25