Lucene search
Veracode Vulnerability DatabaseVERACODE:12507HistoryJan 15, 2019 - 9:17 a.m.
Cross-site Scripting (XSS)
2019-01-1509:17:57
Veracode Vulnerability Database
sca.analysiscenter.veracode.com
10
EPSS
0.001
Percentile
44.2%
python-django-horizon is vulnerable to cross-site scripting (XSS) attacks. The vulnerability exists as OpenStack Horizon 9.x through 9.1.1, 10.x through 10.0.2, and 11.0.0 allows remote authenticated administrators to conduct XSS attacks via a crafted federation mapping.
References
access.redhat.com/errata/RHSA-2017:1598
access.redhat.com/security/updates/classification/#low
bugzilla.redhat.com/show_bug.cgi?id=1408777
bugzilla.redhat.com/show_bug.cgi?id=1414997
bugzilla.redhat.com/show_bug.cgi?id=1427328
bugzilla.redhat.com/show_bug.cgi?id=1432036
bugzilla.redhat.com/show_bug.cgi?id=1432245
bugzilla.redhat.com/show_bug.cgi?id=1432289
bugzilla.redhat.com/show_bug.cgi?id=1454330
Related
nvd
nvd
CVE-2017-7400
2017-04-03 14:59:00
redhat
redhat
cve
cve
CVE-2017-7400
2017-04-03 14:59:00
github
github
OpenStack Horizon Cross-site Scripting (XSS)
2022-05-14 03:53:47
prion
prion
Design/Logic Flaw
2017-04-03 14:59:00
ubuntucve
ubuntucve
CVE-2017-7400
2017-04-03 00:00:00
debiancve
debiancve
CVE-2017-7400
2017-04-03 14:59:00
cvelist
cvelist
CVE-2017-7400
2017-04-03 14:00:00
osv
osv
CVE-2017-7400
2017-04-03 14:59:00
suse
suse
Security update for several openstack-components (important)
2017-05-30 18:14:20