OpenStack Dashboard (aka Horizon) vulnerable to Cross-site Scripting

Mô tả

Tham khảo

• nvd.nist.gov/vuln/detail/CVE-2014-0157 · ADVISORY
• access.redhat.com/errata/RHSA-2014:0581 · WEB
• access.redhat.com/security/cve/CVE-2014-0157 · WEB
• bugzilla.redhat.com/show_bug.cgi · WEB
• launchpad.net/bugs/1289033 · WEB
• opendev.org/openstack/horizon · PACKAGE
• web.archive.org/web/20200228185211/http://www.securityfocus.com/bid/66706 · WEB
• lists.opensuse.org/opensuse-updates/2015-01/msg00040.html · WEB
• openwall.com/lists/oss-security/2014/04/08/8 · WEB
• securityfocus.com/bid/66706
• pypi.org/project/horizon · PACKAGE
• GitHub Advisory GHSA-cmg8-5c63-pg95 · ADVISORY

Lỗ hổng khác của horizon

• CVE-2026-55748TRUNG BÌNH 6.8OpenStack Horizon before 25.7.4 produces scripts for OpenStack RC file downloading that may have a crafted project name with shell metachara…
• CVE-2026-43002TRUNG BÌNH 5.3An issue was discovered in OpenStack Horizon 25.6 and 25.7 before 25.7.3. There is a write operation to the session storage backend before a…
• CVE-2022-45582TRUNG BÌNH 6.1Open Redirect vulnerability in Horizon Web Dashboard 19.4.0 thru 20.1.4 via the success_url parameter.
• CVE-2020-29565TRUNG BÌNH 6.1An issue was discovered in OpenStack Horizon before 15.3.2, 16.x before 16.2.1, 17.x and 18.x before 18.3.3, 18.4.x, and 18.5.x. There is a …
• CVE-2017-7400TRUNG BÌNH 4.8OpenStack Horizon 9.x through 9.1.1, 10.x through 10.0.2, and 11.0.0 allows remote authenticated administrators to conduct XSS attacks via a…