CVEvulnerability
CVE-2016-4428
5.4 MEDIUM
Official page ↗
- Status
- Modified
- Published
- 2016-07-12
- Last modified
- 2026-06-17
- Assigner
- [email protected]
- CVSS 3.1 ([email protected])
- 5.4 MEDIUM — CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N
- CVSS 2.0 ([email protected])
- 3.5 LOW — AV:N/AC:M/Au:S/C:N/I:P/A:N
- Weaknesses
- CWE-79
Description
Cross-site scripting (XSS) vulnerability in OpenStack Dashboard (Horizon) 8.0.1 and earlier and 9.0.0 through 9.0.1 allows remote authenticated users to inject arbitrary web script or HTML by injecting an AngularJS template in a dashboard form.
Affected configurations
• openstack horizon (>= 8.0.0 <= 8.0.1)
• openstack horizon 9.0.0
• openstack horizon 9.0.1
• redhat openstack 6.0
• redhat openstack 7.0
• redhat openstack 8
• redhat openstack 5.0
• debian debian linux 8.0
• debian debian linux 9.0
Related
Weakness · CWE (1)
- CWE-79 Improper Neutralization of Input During Web Page Generation weakness
References
- http://www.debian.org/security/2016/dsa-3617 Third Party Advisory
- http://www.openwall.com/lists/oss-security/2016/06/17/4 Mailing List, Patch, Third Party Advisory
- https://access.redhat.com/errata/RHSA-2016:1268 Third Party Advisory
- https://access.redhat.com/errata/RHSA-2016:1269 Third Party Advisory
- https://access.redhat.com/errata/RHSA-2016:1270 Third Party Advisory
- https://access.redhat.com/errata/RHSA-2016:1271 Third Party Advisory
- https://access.redhat.com/errata/RHSA-2016:1272 Third Party Advisory
- https://bugs.launchpad.net/horizon/+bug/1567673 Issue Tracking, Third Party Advisory
- https://review.openstack.org/329996 Patch, Vendor Advisory
- https://review.openstack.org/329997 Patch, Vendor Advisory
- https://review.openstack.org/329998 Patch, Vendor Advisory
- https://security.openstack.org/ossa/OSSA-2016-010.html Patch, Vendor Advisory
- http://www.debian.org/security/2016/dsa-3617 Third Party Advisory
- http://www.openwall.com/lists/oss-security/2016/06/17/4 Mailing List, Patch, Third Party Advisory
- https://access.redhat.com/errata/RHSA-2016:1268 Third Party Advisory
- https://access.redhat.com/errata/RHSA-2016:1269 Third Party Advisory
- https://access.redhat.com/errata/RHSA-2016:1270 Third Party Advisory
- https://access.redhat.com/errata/RHSA-2016:1271 Third Party Advisory
- https://access.redhat.com/errata/RHSA-2016:1272 Third Party Advisory
- https://bugs.launchpad.net/horizon/+bug/1567673 Issue Tracking, Third Party Advisory
- https://review.openstack.org/329996 Patch, Vendor Advisory
- https://review.openstack.org/329997 Patch, Vendor Advisory
- https://review.openstack.org/329998 Patch, Vendor Advisory
- https://security.openstack.org/ossa/OSSA-2016-010.html Patch, Vendor Advisory