Search for packages
| purl | pkg:deb/debian/horizon@2014.1.1-3?distro=trixie |
| Vulnerability | Summary | Fixed by |
|---|---|---|
| This package is not known to be affected by vulnerabilities. | ||
| Vulnerability | Summary | Aliases |
|---|---|---|
| VCID-dsg5-s5y9-nbe3 | Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Cross-site scripting (XSS) vulnerability in the Orchestration/Stack section in the Horizon Orchestration dashboard in OpenStack Dashboard (Horizon) before 2013.2.4, 2014.1 before 2014.1.2, and Juno before Juno-2, when used with Heat, allows remote Orchestration template owners or catalogs to inject arbitrary web script or HTML via a crafted template. |
CVE-2014-3473
GHSA-8vwv-2v7v-jmgr |
| VCID-n2fx-xctw-r7fr | openstack-horizon: multiple XSS flaws |
CVE-2014-8578
|
| VCID-tngh-mgyc-xka4 | openstack-horizon: multiple XSS flaws |
CVE-2014-3475
|
| VCID-zxjy-82n2-mkdb | Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Cross-site scripting (XSS) vulnerability in horizon/static/horizon/js/horizon.instances.js in the Launch Instance menu in OpenStack Dashboard (Horizon) before 2013.2.4, 2014.1 before 2014.1.2, and Juno before Juno-2 allows remote authenticated users to inject arbitrary web script or HTML via a network name. |
CVE-2014-3474
GHSA-j57p-g33w-95c5 |