Red Hat Security AdvisoryRHSA-2017:1598
python-django-horizon security, bug fix, and enhancement update
Released 2017-06-28 · Red Hat rating Low · View on Red Hat →
Fixed in
- Red Hat OpenStack Platform 10.0 openstack-dashboard-1:10.0.3-6.el7ost, openstack-dashboard-theme-1:10.0.3-6.el7ost, python-django-horizon-1:10.0.3-6.el7ost
Fixes 1 record
Priority LOW 24
OpenStack Horizon 9.x through 9.1.1, 10.x through 10.0.2, and 11.0.0 allows remote authenticated administrators to conduct XSS attacks via a crafted federation mapping.
CVSS 3.0MEDIUM 4.8· Network · High privileges · User interaction · EPSS 0.01063 · Published 2017-04-03 · Fixed in 9.1.2, 10.0.3 +1 CWE-79
