CVE:CVE-2016-4428
CNNVD:CNNVD-201606-448
OpenStack是美国美国国家航空航天局（NASA）的一个云平台管理项目。
OpenStack Dashboard (Horizon) 8.0.1版本及之前版本、9.0.0版本至9.0.1版本存在跨站脚本漏洞。远程攻击者利用该漏洞通过在仪表板表单中注入AngularJS模板来注入任意web脚本或HTML。
solution:Upgrade openstack horizon to a higher version than 8.0.1,9.0.0,9.0.1,and avoid the version [8.0.0,8.0.1],9.0.0,9.0.1; Upgrade redhat openstack to a higher version than 6.0,7.0,8,5.0,and avoid the version 6.0,7.0,8,5.0; Upgrade debian debian_linux to a higher version than 8.0,9.0,and avoid the version 8.0,9.0