Skip to content
OpenAdvisories
Medium RHSA-2015:1679 2 CVEs

Red Hat Security Advisory: python-django-horizon security and bug fix update

Published Sep 15, 2024 · Updated Aug 8, 2026

Ecosystem: Red Hat

Fixed packages 4

ReleasePackageFixed in
Red Hat · OpenStack 6 openstack:6::el7 openstack-dashboard 0:2014.2.3-7.el7ost
Red Hat · OpenStack 6 openstack:6::el7 openstack-dashboard-theme 0:2014.2.3-7.el7ost
Red Hat · OpenStack 6 openstack:6::el7 python-django-horizon 0:2014.2.3-7.el7ost
Red Hat · OpenStack 6 openstack:6::el7 python-django-horizon-doc 0:2014.2.3-7.el7ost

Vulnerabilities 2

  • Medium 6.1
    CVE-2015-3219

    OpenStack Dashboard (Horizon) Cross-site scripting (XSS) vulnerability

    Cross-site scripting (XSS) vulnerability in the Orchestration/Stack section in OpenStack Dashboard (Horizon) 2014.2 before 2014.2.4 and 2015.1.x before 2015.1.1 allows remote attackers to inject arbitrary web script or HTML via the description parameter in a …

    horizon horizon Debian PyPI
  • Unscored —
    CVE-2015-3988

    Multiple cross-site scripting (XSS) vulnerabilities in OpenStack Dashboard (Horizon) 2015.1.0 allow remote authenticate…

    horizon Debian

References

  • article
    https://access.redhat.com/security/updates/classification/#moderate
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=1187992
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=1196249
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=1222871
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=1228534
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=1243301
  • advisory
    https://security.access.redhat.com/data/csaf/v2/advisories/2015/rhsa-2015_1679.json
  • report
    https://access.redhat.com/security/cve/CVE-2015-3219
  • advisory
    https://www.cve.org/CVERecord?id=CVE-2015-3219
  • advisory
    https://nvd.nist.gov/vuln/detail/CVE-2015-3219
  • report
    https://access.redhat.com/security/cve/CVE-2015-3988
  • advisory
    https://www.cve.org/CVERecord?id=CVE-2015-3988
  • advisory
    https://nvd.nist.gov/vuln/detail/CVE-2015-3988