What is GHSA-47vp-44v9-rhgq?

GHSA-47vp-44v9-rhgq is a security advisory published by GitHub Security Advisories with Medium severity. OpenStack Horizon Cross-site Scripting (XSS)

Which CVE IDs does GHSA-47vp-44v9-rhgq cover?

GHSA-47vp-44v9-rhgq covers the following CVE IDs: CVE-2017-7400. Each CVE has its own detail page on EchelonGraph Pulse with the synthesized EG score.

What is the CVSS v3 score of GHSA-47vp-44v9-rhgq?

GHSA-47vp-44v9-rhgq has a CVSS v3 base score of 4.8, published by GitHub Security Advisories.

Which products are affected by GHSA-47vp-44v9-rhgq?

GHSA-47vp-44v9-rhgq affects 3 products, including: pip/horizon:\u003e= 9.0, \u003c 9.1.2; pip/horizon:\u003e= 10.0, \u003c 10.0.3; pip/horizon:\u003e= 11.0.0, \u003c 11.0.1.

GHSA-47vp-44v9-rhgqMediumCVSS 4.8

OpenStack Horizon Cross-site Scripting (XSS)

Vendor

GitHub Security Advisories

Published

May 14, 2022

Last Modified

May 14, 2024

🔗 CVE IDs covered (1)

CVE-2017-7400 →

📋 Description

OpenStack Horizon 9.x through 9.1.1, 10.x through 10.0.2, and 11.0.0 allows remote authenticated administrators to conduct XSS attacks via a crafted federation mapping.

🎯 Affected products3

pip/horizon:>= 9.0, < 9.1.2
pip/horizon:>= 10.0, < 10.0.3
pip/horizon:>= 11.0.0, < 11.0.1

🔗 References (10)

https://nvd.nist.gov/vuln/detail/CVE-2017-7400
https://access.redhat.com/errata/RHSA-2017:1598
https://access.redhat.com/errata/RHSA-2017:1739
https://launchpad.net/bugs/1667086
http://www.securityfocus.com/bid/97324
https://opendev.org/openstack/horizon/commit/1407cfe53144146b29679de21f28c952282043ae
https://opendev.org/openstack/horizon/commit/511b325b45b6bd7a88bb6df1a4639b80d0121277
https://opendev.org/openstack/horizon/commit/a835dbfbaa2c70329c08d4b8429d49315dc6d651
https://opendev.org/openstack/horizon/commit/ce80bb6fec3cb0262728e7ae8b9d695cf832e5bf
https://github.com/advisories/GHSA-47vp-44v9-rhgq