Red Hat Security Advisory

RHSA-2014:0365

python-django-horizon security and bug fix update

Released 2014-04-03 · Red Hat rating Moderate · View on Red Hat →

Fixed in

Red Hat Enterprise Linux OpenStack Platform 3.0 openstack-dashboard-2013.1.5-1.el6ost, python-django-horizon-2013.1.5-1.el6ost, python-django-horizon-doc-2013.1.5-1.el6ost

Fixes 1 record

TI-2013-05632 CVE-2013-6858 · GHSA-q74p-53hj-4w6q

Multiple cross-site scripting (XSS) vulnerabilities in OpenStack Dashboard (Horizon)…

LOW 24

Multiple cross-site scripting (XSS) vulnerabilities in OpenStack Dashboard (Horizon) 2013.2 and earlier allow local users to inject arbitrary web script or HTML via an instance name to (1) "Volumes" or (2) "Network Topol…

CVSS 2.0MEDIUM 4.3 Network No auth Interaction — EPSS 0.01734 Published 2013-11-23 Partial fix CWE-79