CVSS 3.0
4.8 mediumCVSS:3.0/AV:N/AC:L/PR:H/UI:R/S:C/C:L/I:L/A:NCVE-2017-7400
Medium (4.8) in openstack horizon. EPSS 1.1% chance of exploitation in the next 30 days. Fixed in horizon 10.0.3, 11.0.1, 9.1.2.
OpenStack Horizon 9.x through 9.1.1, 10.x through 10.0.2, and 11.0.0 allows remote authenticated administrators to conduct XSS attacks via a crafted federation mapping.
Severity
- EPSS
- 1.1% chance of exploitation in the next 30 days; higher than 64% of CVEs (scores of 2026-10-31)
- CWE
- CWE-79
- Published
- Modified
- Record from
- the NVD, synced
Affected
- openstack:horizon
Packages (OSV)
| Advisory | Ecosystem | Package | Affected | Fixed in |
|---|---|---|---|---|
| GHSA-47vp-44v9-rhgq | PyPI | horizon | >=9.0 <9.1.2 | 9.1.2 |
| GHSA-47vp-44v9-rhgq | PyPI | horizon | >=10.0 <10.0.3 | 10.0.3 |
| GHSA-47vp-44v9-rhgq | PyPI | horizon | >=11.0.0 <11.0.1 | 11.0.1 |
| PYSEC-2026-821 | PyPI | horizon | >=9.0 <9.1.2 >=10.0 <10.0.3 >=11.0.0 <11.0.1 | 9.1.2, 10.0.3, 11.0.1 |