Skip to content
OpenAdvisories
Unscored RHSA-2014:1188 5 CVEs

Red Hat Security Advisory: python-django-horizon security update

Published Sep 15, 2024 · Updated Aug 1, 2026

Ecosystem: Red Hat

Fixed packages 4

ReleasePackageFixed in
Red Hat · OpenStack 4 openstack:4::el6 openstack-dashboard 0:2013.2.3-3.el6ost
Red Hat · OpenStack 4 openstack:4::el6 openstack-dashboard-theme 0:2013.2.3-3.el6ost
Red Hat · OpenStack 4 openstack:4::el6 python-django-horizon 0:2013.2.3-3.el6ost
Red Hat · OpenStack 4 openstack:4::el6 python-django-horizon-doc 0:2013.2.3-3.el6ost

Vulnerabilities 5

  • Medium —
    CVE-2014-3473

    Horizon-Orchestration Cross-site scripting (XSS) vulnerability through resource name

    Cross-site scripting (XSS) vulnerability in the Orchestration/Stack section in the Horizon Orchestration dashboard in OpenStack Dashboard (Horizon) before 2013.2.4, 2014.1 before 2014.1.2, and Juno before Juno-2, when used with Heat, allows remote Orchestrati…

    horizon horizon horizon Debian Ubuntu PyPI
  • Low —
    CVE-2014-3474

    OpenStack Horizon Cross-site scripting (XSS) vulnerability

    Cross-site scripting (XSS) vulnerability in horizon/static/horizon/js/horizon.instances.js in the Launch Instance menu in OpenStack Dashboard (Horizon) before 2013.2.4, 2014.1 before 2014.1.2, and Juno before Juno-2 allows remote authenticated users to inject…

    horizon horizon horizon Debian Ubuntu PyPI
  • Unscored —
    CVE-2014-3475

    Cross-site scripting (XSS) vulnerability in the Users panel (admin/users/) in OpenStack Dashboard (Horizon) before 2013…

    horizon horizon Debian Ubuntu
  • Low —
    CVE-2014-3594

    OpenStack Dashboard (Horizon) Cross-site scripting (XSS) vulnerability in the Host Aggregates interface

    Cross-site scripting (XSS) vulnerability in the Host Aggregates interface in OpenStack Dashboard (Horizon) before 2013.2.4, 2014.1 before 2014.1.2, and Juno before Juno-3 allows remote administrators to inject arbitrary web script or HTML via a new host aggre…

    horizon horizon horizon Debian Ubuntu PyPI
  • Unscored —
    CVE-2014-8578

    Cross-site scripting (XSS) vulnerability in the Groups panel in OpenStack Dashboard (Horizon) before 2013.2.4, 2014.1 b…

    horizon horizon Debian Ubuntu

References

  • article
    https://access.redhat.com/security/updates/classification/#moderate
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=1116090
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=1129774
  • advisory
    https://security.access.redhat.com/data/csaf/v2/advisories/2014/rhsa-2014_1188.json
  • report
    https://access.redhat.com/security/cve/CVE-2014-3473
  • advisory
    https://www.cve.org/CVERecord?id=CVE-2014-3473
  • advisory
    https://nvd.nist.gov/vuln/detail/CVE-2014-3473
  • report
    https://access.redhat.com/security/cve/CVE-2014-3474
  • advisory
    https://www.cve.org/CVERecord?id=CVE-2014-3474
  • advisory
    https://nvd.nist.gov/vuln/detail/CVE-2014-3474
  • report
    https://access.redhat.com/security/cve/CVE-2014-3475
  • advisory
    https://www.cve.org/CVERecord?id=CVE-2014-3475
  • advisory
    https://nvd.nist.gov/vuln/detail/CVE-2014-3475
  • report
    https://access.redhat.com/security/cve/CVE-2014-3594
  • advisory
    https://www.cve.org/CVERecord?id=CVE-2014-3594
  • advisory
    https://nvd.nist.gov/vuln/detail/CVE-2014-3594
  • report
    https://access.redhat.com/security/cve/CVE-2014-8578
  • advisory
    https://www.cve.org/CVERecord?id=CVE-2014-8578
  • advisory
    https://nvd.nist.gov/vuln/detail/CVE-2014-8578