Read the docs
Red Hat Security Advisory

RHSA-2014:0939

python-django-horizon security, bug fix, and enhancement update

Released 2014-07-24 · Red Hat rating Moderate · View on Red Hat →

Fixed in

Fixes 4 records

TI-2014-02800 CVE-2014-3473 · GHSA-8vwv-2v7v-jmgr

Cross-site scripting (XSS) vulnerability in the Orchestration/Stack section in the…

Priority LOW 23

Cross-site scripting (XSS) vulnerability in the Orchestration/Stack section in the Horizon Orchestration dashboard in OpenStack Dashboard (Horizon) before 2013.2.4, 2014.1 before 2014.1.2, and Juno before Juno-2, when us…

CVSS 2.0MEDIUM 4.3 Network No auth Interaction — EPSS 0.01703 Published 2014-10-31 Partial fix · 8.0.0a0 CWE-79
TI-2014-02801 CVE-2014-3474 · GHSA-j57p-g33w-95c5

Cross-site scripting (XSS) vulnerability in…

Priority LOW 21

Cross-site scripting (XSS) vulnerability in horizon/static/horizon/js/horizon.instances.js in the Launch Instance menu in OpenStack Dashboard (Horizon) before 2013.2.4, 2014.1 before 2014.1.2, and Juno before Juno-2 allo…

CVSS 2.0LOW 3.5 Network Low privileges Interaction — EPSS 0.01933 Published 2014-10-31 Partial fix · 8.0.0a0 CWE-79
TI-2014-07044 CVE-2014-8578 · GHSA-grxx-9m9p-rf4j

Cross-site scripting (XSS) vulnerability in the Groups panel in OpenStack Dashboard…

Priority LOW 19

Cross-site scripting (XSS) vulnerability in the Groups panel in OpenStack Dashboard (Horizon) before 2013.2.4, 2014.1 before 2014.1.2, and Juno before Juno-2 allows remote administrators to inject arbitrary web script or…

CVSS 2.0LOW 3.5 Network Low privileges Interaction — EPSS 0.0118 Published 2014-10-31 Partial fix CWE-79
TI-2014-02802 CVE-2014-3475 · GHSA-vw9p-vx37-72h4

Cross-site scripting (XSS) vulnerability in the Users panel (admin/users/) in OpenStack…

Priority LOW 19

Cross-site scripting (XSS) vulnerability in the Users panel (admin/users/) in OpenStack Dashboard (Horizon) before 2013.2.4, 2014.1 before 2014.1.2, and Juno before Juno-2 allows remote administrators to inject arbitrary…

CVSS 2.0LOW 3.5 Network Low privileges Interaction — EPSS 0.01235 Published 2014-10-31 Partial fix CWE-79