Description
OpenStack Horizon 9.x through 9.1.1, 10.x through 10.0.2, and 11.0.0 allows remote authenticated administrators to conduct XSS attacks via a crafted federation mapping.
Fixed in Linux distributions
Distributions backport fixes, so the version that fixes this vulnerability differs per release — upgrade to at least the version shown. From the distributions' security trackers and advisories.
Debian
Security tracker ↗| Release | Package | Fixed in | Advisory |
|---|---|---|---|
| Debian 14 | horizon | 3:10.0.1-1 | — |
| Debian 13 | horizon | 3:10.0.1-1 | — |
| Debian 12 | horizon | 3:10.0.1-1 | — |
Red Hat
Security tracker ↗| Release | Package | Fixed in | Advisory |
|---|---|---|---|
| Red Hat OpenStack 10 | openstack-dashboard +2 | 1:10.0.3-6.el7ost | RHSA-2017:1598 |
| Red Hat OpenStack 9 | openstack-dashboard +2 | 1:9.0.1-13.el7ost | RHSA-2017:1739 |
SUSE
Security tracker ↗| Release | Package | Fixed in | Advisory |
|---|---|---|---|
| SUSE OpenStack Cloud 7 | openstack-ceilometer | 7.0.4~a0~dev7-3.1 | SUSE-SU-2017:1443-1 |
| SUSE OpenStack Cloud 7 | openstack-ceilometer-doc | 7.0.4~a0~dev7-3.2 | SUSE-SU-2017:1443-1 |
| SUSE OpenStack Cloud 7 | openstack-cinder +1 | 9.1.5~a0~dev1-3.1 | SUSE-SU-2017:1443-1 |
| SUSE OpenStack Cloud 7 | openstack-dashboard | 10.0.4~a0~dev2-3.1 | SUSE-SU-2017:1443-1 |
| SUSE OpenStack Cloud 7 | openstack-glance | 13.0.1~a0~dev6-3.1 | SUSE-SU-2017:1443-1 |
| SUSE OpenStack Cloud 7 | openstack-glance-doc | 13.0.1~a0~dev6-3.3 | SUSE-SU-2017:1443-1 |
| SUSE OpenStack Cloud 7 | openstack-heat | 7.0.4~a0~dev4-4.1 | SUSE-SU-2017:1443-1 |
| SUSE OpenStack Cloud 7 | openstack-heat-doc | 7.0.4~a0~dev4-4.2 | SUSE-SU-2017:1443-1 |
| SUSE OpenStack Cloud 7 | openstack-keystone | 10.0.2~a0~dev2-6.1 | SUSE-SU-2017:1443-1 |
| SUSE OpenStack Cloud 7 | openstack-keystone-doc | 10.0.2~a0~dev2-6.2 | SUSE-SU-2017:1443-1 |
| SUSE OpenStack Cloud 7 | openstack-magnum +1 | 3.1.2~a0~dev22-13.1 | SUSE-SU-2017:1443-1 |
| SUSE OpenStack Cloud 7 | openstack-manila +1 | 3.0.1~a0~dev27-3.1 | SUSE-SU-2017:1443-1 |
| SUSE OpenStack Cloud 7 | openstack-nova | 14.0.6~a0~dev16-3.1 | SUSE-SU-2017:1443-1 |
| SUSE OpenStack Cloud 7 | openstack-nova-doc | 14.0.6~a0~dev16-3.3 | SUSE-SU-2017:1443-1 |
Affected packages
| Ecosystem | Package | Affected | Fixed | Record |
|---|---|---|---|---|
| PyPI | horizon | >= 9.0, < 9.1.2 | 9.1.2 | GHSA-47vp-44v9-rhgq |
| PyPI | horizon | >= 10.0, < 10.0.3 | 10.0.3 | GHSA-47vp-44v9-rhgq |
| PyPI | horizon | >= 11.0.0, < 11.0.1 | 11.0.1 | GHSA-47vp-44v9-rhgq |
| PyPI | horizon | >= 9.0, < 9.1.2 · >= 10.0, < 10.0.3 · >= 11.0.0, < 11.0.1 | 9.1.2, 10.0.3, 11.0.1 | PYSEC-2026-821 |
Advisories 3
- RHSA-2017:1739 Red Hat Security Advisory: python-django-horizon security and bug fix update Red Hat Security Advisories (RHSA) · Jun 29, 2026
- RHSA-2017:1598 Red Hat Security Advisory: python-django-horizon security, bug fix, and enhancement update Red Hat Security Advisories (RHSA) · Jun 29, 2026
- SUSE-SU-2017:1443-1 Security update for several openstack-components SUSE / openSUSE Security Updates · Feb 4, 2026
References
- 97324 vdb-entry
- https://launchpad.net/bugs/1667086
- RHSA-2017:1598 vendor-advisory
- RHSA-2017:1739 vendor-advisory