GitHub Advisoryadvisory · PyPI

GHSA-47vp-44v9-rhgq OpenStack Horizon Cross-site Scripting (XSS)

MEDIUM Published 2022-05-14 Modified 2024-05-14 Official page ↗
Aliases
CVE-2017-7400
Ecosystem
PyPI
Packages
horizon
Severity
Moderate
CVSS vector
CVSS:3.0/AV:N/AC:L/PR:H/UI:R/S:C/C:L/I:L/A:N
Weaknesses
CWE-79
Reviewed
2024-05-14

Affected packages

• PyPI horizon: >= 9.0, < 9.1.2 → fixed in 9.1.2 • PyPI horizon: >= 10.0, < 10.0.3 → fixed in 10.0.3 • PyPI horizon: >= 11.0.0, < 11.0.1 → fixed in 11.0.1

Description

OpenStack Horizon 9.x through 9.1.1, 10.x through 10.0.2, and 11.0.0 allows remote authenticated administrators to conduct XSS attacks via a crafted federation mapping.

Related

Alias · CVE (1)

  • CVE-2017-7400 OpenStack Horizon 9.x through 9.1.1, 10.x through 10.0.2, and 11.0.0 allows remote authenticated administrators to conduct XSS attacks via… vulnerability

Weakness · CWE (1)

  • CWE-79 Improper Neutralization of Input During Web Page Generation weakness

References