Red Hat Security AdvisoryRHSA-2017:1739
python-django-horizon security and bug fix update
Released 2017-07-12 · Red Hat rating Low · View on Red Hat →
Fixed in
- Red Hat OpenStack Platform 9.0 openstack-dashboard-1:9.0.1-13.el7ost, openstack-dashboard-theme-1:9.0.1-13.el7ost, python-django-horizon-1:9.0.1-13.el7ost
Fixes 1 record
Priority LOW 24
OpenStack Horizon 9.x through 9.1.1, 10.x through 10.0.2, and 11.0.0 allows remote authenticated administrators to conduct XSS attacks via a crafted federation mapping.
CVSS 3.0MEDIUM 4.8· Network · High privileges · User interaction · EPSS 0.01063 · Published 2017-04-03 · Fixed in 9.1.2, 10.0.3 +1 CWE-79
