Skip to main content

Mondoo

Vulnerability Management
Technology
Services

Solutions

Financial Services
Manufacturing
Healthcare

Resources

Blog
Vulnerability Database
Documentation
GitHub

Company

About
Careers
Partners
Contact

Legal

Privacy
Terms
Imprint

© 2026 Mondoo, Inc.

Log in Get Assessment

GHSA-8g68-2hcj-h8vg | Mondoo Vulnerability Intelligence

Vulnerability IntelligenceGHSA-8g68-2hcj-h8vg

GHSA-8g68-2hcj-h8vg

UNKNOWN

OpenStack Dashboard (Horizon) Cross-site scripting (XSS) vulnerability in the Host Aggregates interface

Published May 13, 2022

Modified 2 years ago

Fix available

Details

Cross-site scripting (XSS) vulnerability in the Host Aggregates interface in OpenStack Dashboard (Horizon) before 2013.2.4, 2014.1 before 2014.1.2, and Juno before Juno-3 allows remote administrators to inject arbitrary web script or HTML via a new host aggregate name.

Affected Packages

horizon

PyPI

Fixed in:

8.0.0a0

References

http://lists.opensuse.org/opensuse-updates/2015-01/msg00040.html

http://rhn.redhat.com/errata/RHSA-2014-1335.html

http://rhn.redhat.com/errata/RHSA-2014-1336.html

http://seclists.org/oss-sec/2014/q3/413

http://www.securityfocus.com/bid/69291

https://access.redhat.com/errata/RHSA-2014:1188

https://access.redhat.com/errata/RHSA-2014:1335

https://access.redhat.com/errata/RHSA-2014:1336

https://access.redhat.com/security/cve/CVE-2014-3594

https://bugs.launchpad.net/horizon/+bug/1349491

https://bugzilla.redhat.com/show_bug.cgi?id=1129774

https://exchange.xforce.ibmcloud.com/vulnerabilities/95378

https://github.com/advisories/GHSA-8g68-2hcj-h8vg

https://github.com/openstack/horizon/commit/ba2c98aea0db0d03200c811b86b3efe8367f3905

https://github.com/openstack/horizon/commit/ba908ae88d5925f4f6783eb234cc4ea95017472b

https://nvd.nist.gov/vuln/detail/CVE-2014-3594

https://review.openstack.org/#/c/115310

https://review.openstack.org/#/c/115311

https://review.openstack.org/#/c/115313

Aliases

Related

Ecosystems

Timeline

PublishedMay 13, 2022

ModifiedMay 14, 2024