Skip to content
OpenAdvisories
Medium RHSA-2016:1271 1 CVE

Red Hat Security Advisory: python-django-horizon security and bug fix update

Published Sep 13, 2024 · Updated Jun 29, 2026

Ecosystem: Red Hat

Fixed packages 4

ReleasePackageFixed in
Red Hat · OpenStack 6 openstack:6::el7 openstack-dashboard 0:2014.2.3-9.el7ost
Red Hat · OpenStack 6 openstack:6::el7 openstack-dashboard-theme 0:2014.2.3-9.el7ost
Red Hat · OpenStack 6 openstack:6::el7 python-django-horizon 0:2014.2.3-9.el7ost
Red Hat · OpenStack 6 openstack:6::el7 python-django-horizon-doc 0:2014.2.3-9.el7ost

Vulnerabilities 1

  • Medium 5.4
    CVE-2016-4428

    OpenStack Dashboard (Horizon) Cross-site scripting (XSS) vulnerability

    Cross-site scripting (XSS) vulnerability in OpenStack Dashboard (Horizon) 8.0.1 and earlier and 9.0.0 through 9.0.1 allows remote authenticated users to inject arbitrary web script or HTML by injecting an AngularJS template in a dashboard form.

    horizon horizon horizon Debian Ubuntu PyPI

References

  • article
    https://access.redhat.com/security/updates/classification/#important
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=1238092
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=1293232
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=1343982
  • advisory
    https://security.access.redhat.com/data/csaf/v2/advisories/2016/rhsa-2016_1271.json
  • report
    https://access.redhat.com/security/cve/CVE-2016-4428
  • advisory
    https://www.cve.org/CVERecord?id=CVE-2016-4428
  • advisory
    https://nvd.nist.gov/vuln/detail/CVE-2016-4428