Red Hat Security AdvisoryRHSA-2015:1679
python-django-horizon security and bug fix update
Released 2015-08-24 · Red Hat rating Moderate · View on Red Hat →
Fixed in
- Red Hat Enterprise Linux OpenStack Platform 6.0 (Juno) for RHEL 7 openstack-dashboard-2014.2.3-7.el7ost, openstack-dashboard-theme-2014.2.3-7.el7ost, python-django-horizon-2014.2.3-7.el7ost +1
Fixes 2 records
Priority LOW 26
Cross-site scripting (XSS) vulnerability in the Orchestration/Stack section in OpenStack Dashboard (Horizon) 2014.2 before 2014.2.4 and 2015.1.x before 2015.1.1 allows remote attackers to inject arbitrary web script or H…
CVSS 2.0MEDIUM 4.3· Network · No auth · Interaction — · EPSS 0.03196 · Published 2015-08-20 · Fixed in 8.0.0a0 CWE-79
Priority LOW 20
Multiple cross-site scripting (XSS) vulnerabilities in OpenStack Dashboard (Horizon) 2015.1.0 allow remote authenticated users to inject arbitrary web script or HTML via the metadata to a (1) Glance image, (2) Nova flavo…
CVSS 2.0LOW 3.5· Network · Low privileges · Interaction — · EPSS 0.01787 · Published 2015-05-19 · Fixed CWE-79
