3 matches found
PYSEC-2020-225
An issue was discovered in OpenStack blazar-dashboard before 1.3.1, 2.0.0, and 3.0.0. A user allowed to access the Blazar dashboard in Horizon may trigger code execution on the Horizon host as the user the Horizon service runs under because the Python eval function is used. This may result in...
CVE-2020-26943: Undefined Security Weakness
An issue was discovered in OpenStack blazar-dashboard before 1.3.1, 2.0.0, and 3.0.0. A user allowed to access the Blazar dashboard in Horizon may trigger code execution on the Horizon host as the user the Horizon service runs under because the Python eval function is used. This may result in...
PT-2020-16561
Name of the Vulnerable Software and Affected Versions OpenStack blazar-dashboard versions prior to 1.3.1 OpenStack blazar-dashboard version 2.0.0 OpenStack blazar-dashboard version 3.0.0 Description An issue in OpenStack blazar-dashboard allows a user with access to the Blazar dashboard in Horizo...