GitHub Advisoryadvisory · PyPI

GHSA-8g68-2hcj-h8vg OpenStack Dashboard (Horizon) Cross-site scripting (XSS) vulnerability in the Host Aggregates interface

LOW Published 2022-05-13 Modified 2024-05-14 Official page ↗
Aliases
CVE-2014-3594
Ecosystem
PyPI
Packages
horizon
Severity
Low
Weaknesses
CWE-79
Reviewed
2024-05-14

Affected packages

• PyPI horizon: < 8.0.0a0 → fixed in 8.0.0a0

Description

Cross-site scripting (XSS) vulnerability in the Host Aggregates interface in OpenStack Dashboard (Horizon) before 2013.2.4, 2014.1 before 2014.1.2, and Juno before Juno-3 allows remote administrators to inject arbitrary web script or HTML via a new host aggregate name.

Related

Alias · CVE (1)

  • CVE-2014-3594 Cross-site scripting (XSS) vulnerability in the Host Aggregates interface in OpenStack Dashboard (Horizon) before 2013.2.4, 2014.1 before… vulnerability

Weakness · CWE (1)

  • CWE-79 Improper Neutralization of Input During Web Page Generation weakness

References