OpenStack Horizon Cross-site Scripting (XSS)
OpenStack Horizon 9.x through 9.1.1, 10.x through 10.0.2, and 11.0.0 allows remote authenticated administrators to conduct XSS attacks via a crafted federation mapping.
01
describes (1)
Related CVEs.
| ID | severity | exploitable | ||
|---|---|---|---|---|
| CVE-2017-7400US | medium4.8 | — | ||
OpenStack Horizon 9.x through 9.1.1, 10.x through 10.0.2, and 11.0.0 allows remote authenticated administrators to conduct XSS attacks via a crafted federation mapping. | ||||
02
references
External citations — patches, advisories, analysis.
- http://www.securityfocus.com/bid/97324WEB
- https://access.redhat.com/errata/RHSA-2017:1598WEB
- https://access.redhat.com/errata/RHSA-2017:1739WEB
- https://github.com/advisories/GHSA-47vp-44v9-rhgqADVISORY
- https://launchpad.net/bugs/1667086WEB
- https://nvd.nist.gov/vuln/detail/CVE-2017-7400ADVISORY
- https://opendev.org/openstack/horizon/commit/1407cfe53144146b29679de21f28c952282043aeWEB
- https://opendev.org/openstack/horizon/commit/511b325b45b6bd7a88bb6df1a4639b80d0121277WEB
scry
Advisories like this name the exposed products attackers go after on your perimeter. See what is exposed on your perimeter with a free passive scan.
Free scan