Red Hat Security Advisory

RHSA-2014:1188

python-django-horizon security update

Released 2014-09-15 · Red Hat rating Moderate · View on Red Hat →

Fixed in

Red Hat Enterprise Linux OpenStack Platform 4.0 openstack-dashboard-2013.2.3-3.el6ost, openstack-dashboard-theme-2013.2.3-3.el6ost, python-django-horizon-2013.2.3-3.el6ost +1

Fixes 5 records

TI-2014-02800 CVE-2014-3473 · GHSA-8vwv-2v7v-jmgr

Cross-site scripting (XSS) vulnerability in the Orchestration/Stack section in the…

LOW 23

Cross-site scripting (XSS) vulnerability in the Orchestration/Stack section in the Horizon Orchestration dashboard in OpenStack Dashboard (Horizon) before 2013.2.4, 2014.1 before 2014.1.2, and Juno before Juno-2, when us…

CVSS 2.0MEDIUM 4.3 Network No auth Interaction — EPSS 0.01703 Published 2014-10-31 Partial fix · 8.0.0a0 CWE-79

TI-2014-02917 CVE-2014-3594 · GHSA-8g68-2hcj-h8vg

Cross-site scripting (XSS) vulnerability in the Host Aggregates interface in OpenStack…

LOW 21

Cross-site scripting (XSS) vulnerability in the Host Aggregates interface in OpenStack Dashboard (Horizon) before 2013.2.4, 2014.1 before 2014.1.2, and Juno before Juno-3 allows remote administrators to inject arbitrary…

CVSS 2.0LOW 3.5 Network Low privileges Interaction — EPSS 0.0207 Published 2014-08-22 Partial fix · 8.0.0a0 CWE-79

TI-2014-02801 CVE-2014-3474 · GHSA-j57p-g33w-95c5

Cross-site scripting (XSS) vulnerability in…

LOW 21

Cross-site scripting (XSS) vulnerability in horizon/static/horizon/js/horizon.instances.js in the Launch Instance menu in OpenStack Dashboard (Horizon) before 2013.2.4, 2014.1 before 2014.1.2, and Juno before Juno-2 allo…

CVSS 2.0LOW 3.5 Network Low privileges Interaction — EPSS 0.01933 Published 2014-10-31 Partial fix · 8.0.0a0 CWE-79

TI-2014-07044 CVE-2014-8578 · GHSA-grxx-9m9p-rf4j

Cross-site scripting (XSS) vulnerability in the Groups panel in OpenStack Dashboard…

LOW 19

Cross-site scripting (XSS) vulnerability in the Groups panel in OpenStack Dashboard (Horizon) before 2013.2.4, 2014.1 before 2014.1.2, and Juno before Juno-2 allows remote administrators to inject arbitrary web script or…

CVSS 2.0LOW 3.5 Network Low privileges Interaction — EPSS 0.0118 Published 2014-10-31 Partial fix CWE-79

TI-2014-02802 CVE-2014-3475 · GHSA-vw9p-vx37-72h4

Cross-site scripting (XSS) vulnerability in the Users panel (admin/users/) in OpenStack…

LOW 19

Cross-site scripting (XSS) vulnerability in the Users panel (admin/users/) in OpenStack Dashboard (Horizon) before 2013.2.4, 2014.1 before 2014.1.2, and Juno before Juno-2 allows remote administrators to inject arbitrary…

CVSS 2.0LOW 3.5 Network Low privileges Interaction — EPSS 0.01235 Published 2014-10-31 Partial fix CWE-79