CVE-2017-7400: OpenStack Horizon Cross-site Scripting (XSS)
(updated )
OpenStack Horizon 9.x through 9.1.1, 10.x through 10.0.2, and 11.0.0 allows remote authenticated administrators to conduct XSS attacks via a crafted federation mapping.
References
- access.redhat.com/errata/RHSA-2017:1598
- access.redhat.com/errata/RHSA-2017:1739
- github.com/advisories/GHSA-47vp-44v9-rhgq
- launchpad.net/bugs/1667086
- nvd.nist.gov/vuln/detail/CVE-2017-7400
- opendev.org/openstack/horizon/commit/1407cfe53144146b29679de21f28c952282043ae
- opendev.org/openstack/horizon/commit/511b325b45b6bd7a88bb6df1a4639b80d0121277
- opendev.org/openstack/horizon/commit/a835dbfbaa2c70329c08d4b8429d49315dc6d651
- opendev.org/openstack/horizon/commit/ce80bb6fec3cb0262728e7ae8b9d695cf832e5bf
Code Behaviors & Features
Detect and mitigate CVE-2017-7400 with GitLab Dependency Scanning
Secure your software supply chain by verifying that all open source dependencies used in your projects contain no disclosed vulnerabilities. Dependency Scanning using SBOM also detects vulnerabilities from proprietary advisories that this site does not include. Learn more about Dependency Scanning using SBOM →