Read the docs
Red Hat Security Advisory

RHSA-2016:1272

python-django-horizon security, bug fix, and enhancement update

Released 2016-06-21 · Red Hat rating Important · View on Red Hat →

Fixed in

Fixes 1 record

Priority LOW 29

Cross-site scripting (XSS) vulnerability in OpenStack Dashboard (Horizon) 8.0.1 and earlier and 9.0.0 through 9.0.1 allows remote authenticated users to inject arbitrary web script or HTML by injecting an AngularJS templ…

CVSS 3.1MEDIUM 5.4 Network Low privileges User interaction EPSS 0.02085 Published 2016-07-12 Fixed in 8.0.2, 9.1.0 CWE-79