Skip to content
OpenAdvisories
Unscored RHSA-2014:0581 1 CVE

Red Hat Security Advisory: python-django-horizon security update

Published Sep 15, 2024 · Updated Aug 1, 2026

Fixed packages 4

ReleasePackageFixed in
Red Hat · OpenStack 4 openstack:4::el6 openstack-dashboard 0:2013.2.3-1.el6ost
Red Hat · OpenStack 4 openstack:4::el6 openstack-dashboard-theme 0:2013.2.3-1.el6ost
Red Hat · OpenStack 4 openstack:4::el6 python-django-horizon 0:2013.2.3-1.el6ost
Red Hat · OpenStack 4 openstack:4::el6 python-django-horizon-doc 0:2013.2.3-1.el6ost

Vulnerabilities 1

  • Medium —

    OpenStack Dashboard (aka Horizon) vulnerable to Cross-site Scripting

    Cross-site scripting (XSS) vulnerability in the Horizon Orchestration dashboard in OpenStack Dashboard (aka Horizon) 2013.2 before 2013.2.4 and icehouse before icehouse-rc2 allows remote attackers to inject arbitrary web script or HTML via the description fie…

References

  • article
    https://access.redhat.com/security/updates/classification/#low
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=1082858
  • advisory
    https://security.access.redhat.com/data/csaf/v2/advisories/2014/rhsa-2014_0581.json
  • report
    https://access.redhat.com/security/cve/CVE-2014-0157
  • advisory
    https://www.cve.org/CVERecord?id=CVE-2014-0157
  • advisory
    https://nvd.nist.gov/vuln/detail/CVE-2014-0157