Red Hat Security AdvisoryRHSA-2016:1272
python-django-horizon security, bug fix, and enhancement update
Released 2016-06-21 · Red Hat rating Important · View on Red Hat →
Fixed in
- Red Hat Enterprise Linux OpenStack Platform 7.0 (Kilo) for RHEL 7 openstack-dashboard-2015.1.4-1.el7ost, openstack-dashboard-theme-2015.1.4-1.el7ost, python-django-horizon-2015.1.4-1.el7ost +1
Fixes 1 record
Priority LOW 29
Cross-site scripting (XSS) vulnerability in OpenStack Dashboard (Horizon) 8.0.1 and earlier and 9.0.0 through 9.0.1 allows remote authenticated users to inject arbitrary web script or HTML by injecting an AngularJS templ…
CVSS 3.1MEDIUM 5.4· Network · Low privileges · User interaction · EPSS 0.02085 · Published 2016-07-12 · Fixed in 8.0.2, 9.1.0 CWE-79