Red Hat Security Advisory

RHSA-2016:1269

python-django-horizon security update

Released 2016-06-21 · Red Hat rating Important · View on Red Hat →

Fixed in

Red Hat Enterprise Linux OpenStack Platform 5.0 (Icehouse) for RHEL 7 openstack-dashboard-2014.1.5-4.el7ost, openstack-dashboard-theme-2014.1.5-4.el7ost, python-django-horizon-2014.1.5-4.el7ost +1

Fixes 1 record

TI-2016-03804 CVE-2016-4428 · GHSA-grm6-x6mr-q3cv

Cross-site scripting (XSS) vulnerability in OpenStack Dashboard (Horizon) 8.0.1 and…

LOW 29

Cross-site scripting (XSS) vulnerability in OpenStack Dashboard (Horizon) 8.0.1 and earlier and 9.0.0 through 9.0.1 allows remote authenticated users to inject arbitrary web script or HTML by injecting an AngularJS templ…

CVSS 3.1MEDIUM 5.4 Network Low privileges User interaction EPSS 0.02085 Published 2016-07-12 Fixed in 8.0.2, 9.1.0 CWE-79