Skip to content
OpenAdvisories
Medium USN-3447-1 1 CVE

horizon vulnerability

Published Oct 11, 2017 · Updated Feb 10, 2026

Ecosystem: Ubuntu

Summary

Beth Lancaster and Brandon Sawyers discovered that OpenStack Horizon was
incorrect protected against cross-site scripting (XSS) attacks. A remote
authenticated user could use this issue to inject web script or HTML in
a dashboard form.

Fixed packages 1

ReleasePackageFixed in
Ubuntu · 14.04 LTS 14.04:LTS horizon 1:2014.1.5-0ubuntu2.1

Vulnerabilities 1

  • Medium 5.4
    CVE-2016-4428

    OpenStack Dashboard (Horizon) Cross-site scripting (XSS) vulnerability

    Cross-site scripting (XSS) vulnerability in OpenStack Dashboard (Horizon) 8.0.1 and earlier and 9.0.0 through 9.0.1 allows remote authenticated users to inject arbitrary web script or HTML by injecting an AngularJS template in a dashboard form.

    horizon horizon horizon Debian Ubuntu PyPI

References

  • report
    https://ubuntu.com/security/CVE-2016-4428