medium4.8
CVE-2017-7400
OpenStack Horizon 9.x through 9.1.1, 10.x through 10.0.2, and 11.0.0 allows remote authenticated administrators to conduct XSS attacks via a crafted federation…
Impact
OpenStack Horizon 9.x through 9.1.1, 10.x through 10.0.2, and 11.0.0 allows remote authenticated administrators to conduct XSS attacks via a crafted federation mapping.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Openstack | Horizon | Versions 9.0.0, 9.0.1, 9.1.0, 9.1.1, 10.0.0, 10.0.1 |
Weakness classification
References
- NVD record
- CVE.org record
- http://www.securityfocus.com/bid/97324
- https://access.redhat.com/errata/RHSA-2017:1598
- https://access.redhat.com/errata/RHSA-2017:1739
- https://launchpad.net/bugs/1667086
- http://www.securityfocus.com/bid/97324
- https://access.redhat.com/errata/RHSA-2017:1598
- https://access.redhat.com/errata/RHSA-2017:1739
- https://launchpad.net/bugs/1667086