GHSA-47vp-44v9-rhgq

Suggest an improvement
Source
https://github.com/advisories/GHSA-47vp-44v9-rhgq
Import Source
https://github.com/github/advisory-database/blob/main/advisories/github-reviewed/2022/05/GHSA-47vp-44v9-rhgq/GHSA-47vp-44v9-rhgq.json
JSON Data
https://api.test.osv.dev/v1/vulns/GHSA-47vp-44v9-rhgq
Aliases
Published
2022-05-14T03:53:47Z
Modified
2024-05-14T21:57:08.904594Z
Severity
  • 4.8 (Medium) CVSS_V3 - CVSS:3.0/AV:N/AC:L/PR:H/UI:R/S:C/C:L/I:L/A:N CVSS Calculator
Summary
OpenStack Horizon Cross-site Scripting (XSS)
Details

OpenStack Horizon 9.x through 9.1.1, 10.x through 10.0.2, and 11.0.0 allows remote authenticated administrators to conduct XSS attacks via a crafted federation mapping.

Database specific
{
    "nvd_published_at": "2017-04-03T14:59:00Z",
    "cwe_ids": [
        "CWE-79"
    ],
    "severity": "MODERATE",
    "github_reviewed": true,
    "github_reviewed_at": "2024-05-14T21:28:08Z"
}
References

Affected packages

PyPI / horizon

Package

Affected ranges

Type
ECOSYSTEM
Events
Introduced
9.0
Fixed
9.1.2

PyPI / horizon

Package

Affected ranges

Type
ECOSYSTEM
Events
Introduced
10.0
Fixed
10.0.3

PyPI / horizon

Package

Affected ranges

Type
ECOSYSTEM
Events
Introduced
11.0.0
Fixed
11.0.1