CVE-2014-8578

Cross-site scripting (XSS) vulnerability in the Groups panel in OpenStack Dashboard (Horizon) before 2013.2.4, 2014.1 before 2014.1.2, and Juno before Juno-2 allows remote administrators to inject arbitrary web script or HTML via a user email address, a different vulnerability than CVE-2014-3475.

• CWE-79

• http://www.openwall.com/lists/oss-security/2014/07/08/6Mailing List, Patch
• http://www.securityfocus.com/bid/68456Third Party Advisory, VDB Entry
• https://bugs.launchpad.net/horizon/+bug/1320235Issue Tracking, Third Party Advisory
• http://www.openwall.com/lists/oss-security/2014/07/08/6Mailing List, Patch
• http://www.securityfocus.com/bid/68456Third Party Advisory, VDB Entry
• https://bugs.launchpad.net/horizon/+bug/1320235Issue Tracking, Third Party Advisory

Published

Oct 31, 2014

Last Modified

Jun 17, 2026

Status

Modified

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2014-8572Huawei AC6605 with software V200R001C00; AC6605 with softwar…
• CVE-2014-8573Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultID…
• CVE-2014-8574Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultID…
• CVE-2014-8575Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultID…
• CVE-2014-8576Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultID…
• CVE-2014-8577Multiple cross-site scripting (XSS) vulnerabilities in Croog…
• CVE-2014-8579TRENDnet TEW-823DRU devices with firmware before 1.00b36 hav…
• CVE-2014-8580Citrix NetScaler Application Delivery Controller and NetScal…
• CVE-2014-8582FortiNet FortiADC-E with firmware 3.1.1 before 4.0.5 and Coy…
• CVE-2014-8583mod_wsgi before 4.2.4 for Apache, when creating a daemon pro…
• CVE-2014-8584Cross-site scripting (XSS) vulnerability in the Web Dorado S…
• CVE-2014-8585Directory traversal vulnerability in the WordPress Download …