CVE-2017-7400
Fixed in a distro release EPSS 1%
OpenStack Horizon 9.x through 9.1.1, 10.x through 10.0.2, and 11.0.0 allows remote authenticated administrators to conduct XSS attacks via a crafted federation mapping.
Products: openstack horizon
Fixed upstream
| Ecosystem | Package | Fixed in |
|---|---|---|
| PyPI | horizon | 9.1.2 |
| PyPI | horizon | 10.0.3 |
| PyPI | horizon | 11.0.1 |
Distro releases
| Release | Package | Fixed in |
|---|---|---|
| Debian 12 | horizon | 3:10.0.1-1 |
| Debian 13 | horizon | 3:10.0.1-1 |
| Debian 14 | horizon | 3:10.0.1-1 |
| Red Hat openstack 10 | openstack-dashboard | 1:10.0.3-6.el7ost |
| Red Hat openstack 10 | openstack-dashboard-theme | 1:10.0.3-6.el7ost |
| Red Hat openstack 10 | python-django-horizon | 1:10.0.3-6.el7ost |
| Red Hat openstack 9 | openstack-dashboard | 1:9.0.1-13.el7ost |
| Red Hat openstack 9 | openstack-dashboard-theme | 1:9.0.1-13.el7ost |
| Red Hat openstack 9 | python-django-horizon | 1:9.0.1-13.el7ost |
| SUSE OpenStack Cloud 7 | openstack-ceilometer | 7.0.4~a0~dev7-3.1 |
| SUSE OpenStack Cloud 7 | openstack-ceilometer-doc | 7.0.4~a0~dev7-3.2 |
| SUSE OpenStack Cloud 7 | openstack-cinder | 9.1.5~a0~dev1-3.1 |
| SUSE OpenStack Cloud 7 | openstack-cinder-doc | 9.1.5~a0~dev1-3.1 |
| SUSE OpenStack Cloud 7 | openstack-dashboard | 10.0.4~a0~dev2-3.1 |
| SUSE OpenStack Cloud 7 | openstack-glance | 13.0.1~a0~dev6-3.1 |
| SUSE OpenStack Cloud 7 | openstack-glance-doc | 13.0.1~a0~dev6-3.3 |
| SUSE OpenStack Cloud 7 | openstack-heat | 7.0.4~a0~dev4-4.1 |
| SUSE OpenStack Cloud 7 | openstack-heat-doc | 7.0.4~a0~dev4-4.2 |
| SUSE OpenStack Cloud 7 | openstack-keystone | 10.0.2~a0~dev2-6.1 |
| SUSE OpenStack Cloud 7 | openstack-keystone-doc | 10.0.2~a0~dev2-6.2 |
| SUSE OpenStack Cloud 7 | openstack-magnum | 3.1.2~a0~dev22-13.1 |
| SUSE OpenStack Cloud 7 | openstack-magnum-doc | 3.1.2~a0~dev22-13.1 |
| SUSE OpenStack Cloud 7 | openstack-manila | 3.0.1~a0~dev27-3.1 |
| SUSE OpenStack Cloud 7 | openstack-manila-doc | 3.0.1~a0~dev27-3.1 |
| SUSE OpenStack Cloud 7 | openstack-nova | 14.0.6~a0~dev16-3.1 |
| SUSE OpenStack Cloud 7 | openstack-nova-doc | 14.0.6~a0~dev16-3.3 |