Skip to content

CVE-2017-7400 OpenStack Horizon Cross-site Scripting (XSS)

MediumCVSS 4.8 EPSS 1.1%
Published
Updated
Exploit status
No public exploit known
Sign in for asset impact Search another CVE

Description

OpenStack Horizon 9.x through 9.1.1, 10.x through 10.0.2, and 11.0.0 allows remote authenticated administrators to conduct XSS attacks via a crafted federation mapping.

Affected products

ProductAffected versionsFixed in
pypi horizon(PyPI) >= 9.0, < 9.1.2 9.1.2
pypi horizon(PyPI) >= 10.0, < 10.0.3 10.0.3
pypi horizon(PyPI) >= 11.0.0, < 11.0.1 11.0.1
debian/horizon(Debian:12) < 3:10.0.1-1 3:10.0.1-1
debian/horizon(Debian:13) < 3:10.0.1-1 3:10.0.1-1
debian/horizon(Debian:14) < 3:10.0.1-1 3:10.0.1-1
OpenStack horizon = 9.0.0 No fix listed
OpenStack horizon = 9.0.0-b1 No fix listed
OpenStack horizon = 9.0.0-b2 No fix listed
OpenStack horizon = 9.0.0-b3 No fix listed
OpenStack horizon = 9.0.0-rc1 No fix listed
OpenStack horizon = 9.0.0-rc2 No fix listed
OpenStack horizon = 9.0.1 No fix listed
OpenStack horizon = 9.1.0 No fix listed
OpenStack horizon = 9.1.1 No fix listed
OpenStack horizon = 10.0.0 No fix listed
OpenStack horizon = 10.0.0-b1 No fix listed
OpenStack horizon = 10.0.0-b2 No fix listed
OpenStack horizon = 10.0.0-b3 No fix listed
OpenStack horizon = 10.0.0-rc1 No fix listed
OpenStack horizon = 10.0.0-rc2 No fix listed
OpenStack horizon = 10.0.0-rc3 No fix listed
OpenStack horizon = 10.0.1 No fix listed
OpenStack horizon = 10.0.2 No fix listed
OpenStack horizon = 11.0.0 No fix listed

References