Search for packages
| purl | pkg:pypi/horizon@14.0.0.0b2 |
| Next non-vulnerable version | None. |
| Latest non-vulnerable version | None. |
| Risk score | 2.8 |
| Advisory | Summary | Fixed in package version |
|---|---|---|
|
CVE-2013-4471
|
Credentials Management The Identity v3 API in OpenStack Dashboard (Horizon) does not require the current password when changing passwords for … | There are no reported fixed by versions. |
|
PYSEC-2012-18
Aliases: CVE-2012-3540 |
Open redirect vulnerability in views/auth_forms.py in OpenStack Dashboard (Horizon) Essex (2012.1) allows remote attackers to redirect users to arbitrary web … | There are no reported fixed by versions. |
|
PYSEC-2012-18
Aliases: CVE-2012-3540 |
Open redirect vulnerability in views/auth_forms.py in OpenStack Dashboard (Horizon) Essex (2012.1) allows remote attackers to redirect users to arbitrary web … | There are no reported fixed by versions. |
|
GHSA-f8fh-xp28-q59m
Aliases: CVE-2020-29565 |
OpenStack Horizon Open redirect in workflow forms An issue was discovered in OpenStack Horizon before 15.3.2, 16.x before 16.2.1, 17.x … |
Vulnerable |
|
PYSEC-2012-32
Aliases: CVE-2012-2094 GHSA-j772-hpmw-32rm |
Cross-site scripting (XSS) vulnerability in the refresh mechanism in the log viewer in horizon/static/horizon/js/horizon.js in OpenStack Dashboard (Horizon) folsom-1 and … | There are no reported fixed by versions. |
|
PYSEC-2012-33
Aliases: CVE-2012-2144 GHSA-w7h9-8wr4-hwqh |
Session fixation vulnerability in OpenStack Dashboard (Horizon) folsom-1 and 2012.1 allows remote attackers to hijack web sessions via the sessionid … | There are no reported fixed by versions. |
|
PYSEC-2012-32
Aliases: CVE-2012-2094 GHSA-j772-hpmw-32rm |
Cross-site scripting (XSS) vulnerability in the refresh mechanism in the log viewer in horizon/static/horizon/js/horizon.js in OpenStack Dashboard (Horizon) folsom-1 and … | There are no reported fixed by versions. |
|
PYSEC-2012-33
Aliases: CVE-2012-2144 GHSA-w7h9-8wr4-hwqh |
Session fixation vulnerability in OpenStack Dashboard (Horizon) folsom-1 and 2012.1 allows remote attackers to hijack web sessions via the sessionid … | There are no reported fixed by versions. |
|
PYSEC-2026-2519
Aliases: CVE-2026-55748 GHSA-6wrm-x65g-hr4p |
OpenStack Horizon RC file generation does not escape special characters in project names OpenStack Horizon before 25.7.4 produces scripts for … | There are no reported fixed by versions. |