Skip to content
OpenAdvisories
Medium RHSA-2016:1268 1 CVE

Red Hat Security Advisory: python-django-horizon security update

Published Sep 13, 2024 · Updated Jun 29, 2026

Ecosystem: Red Hat

Fixed packages 4

ReleasePackageFixed in
Red Hat · OpenStack 5 openstack:5::el6 openstack-dashboard 0:2014.1.5-4.el6ost
Red Hat · OpenStack 5 openstack:5::el6 openstack-dashboard-theme 0:2014.1.5-4.el6ost
Red Hat · OpenStack 5 openstack:5::el6 python-django-horizon 0:2014.1.5-4.el6ost
Red Hat · OpenStack 5 openstack:5::el6 python-django-horizon-doc 0:2014.1.5-4.el6ost

Vulnerabilities 1

  • Medium 5.4
    CVE-2016-4428

    OpenStack Dashboard (Horizon) Cross-site scripting (XSS) vulnerability

    Cross-site scripting (XSS) vulnerability in OpenStack Dashboard (Horizon) 8.0.1 and earlier and 9.0.0 through 9.0.1 allows remote authenticated users to inject arbitrary web script or HTML by injecting an AngularJS template in a dashboard form.

    horizon horizon horizon Debian Ubuntu PyPI

References

  • article
    https://access.redhat.com/security/updates/classification/#important
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=1343982
  • advisory
    https://security.access.redhat.com/data/csaf/v2/advisories/2016/rhsa-2016_1268.json
  • report
    https://access.redhat.com/security/cve/CVE-2016-4428
  • advisory
    https://www.cve.org/CVERecord?id=CVE-2016-4428
  • advisory
    https://nvd.nist.gov/vuln/detail/CVE-2016-4428