Permalink
CVE-2026-40212
5.4 MEDIUM
- CVSS version: 3.1
- Attack vector (AV): NETWORK
- Attack complexity (AC): LOW
- Privileges required (PR): LOW
- User interaction (UI): REQUIRED
- Scope (S): CHANGED
- Confidentiality impact (C): LOW
- Integrity impact (I): LOW
- Availability impact (A): NONE
OpenStack Skyline before 5.0.1, 6.0.0, and 7.0.0 has a DOM-based …
OpenStack Skyline before 5.0.1, 6.0.0, and 7.0.0 has a DOM-based Cross-Site Scripting (XSS) vulnerability in the console because document.write is used unsafely, which is relevant in scenarios where administrators use the console web interface to view instance console logs.
References
Affected products
Skyline
- ==6.0.0
- <5.0.1
- ==7.0.0
Package maintainers
-
@PerchunPak Perchun Pak <nixpkgs@perchun.it>