“Horizon Core security contacts” team

Subscribed bugs


1 → 13 of 13 results First • Previous • Next • Last
Medium
New
#1417762 XSS in network create error reporting
OpenStack Dashboard (Horizon) 12
Medium
Confirmed
#1842930 Deleted user still can delete volumes in Horizon
OpenStack Dashboard (Horizon) 8
Medium
Triaged
#1842930 Deleted user still can delete volumes in Horizon
keystonemiddleware 8
Low
New
#1651679 horizon auth switch redir DoS
OpenStack Dashboard (Horizon) 8
Undecided
New
#1651679 horizon auth switch redir DoS
django-openstack-auth 8
Undecided
In Progress
#1724598 DOS : API_RESULT_LIMIT does not work for swift objects
OpenStack Dashboard (Horizon) 28
Undecided
Incomplete
#1892848 XSS in adding JavaScript into the ‘Subnet Name’ field
OpenStack Security Advisory 268
Undecided
Incomplete
#1892848 XSS in adding JavaScript into the ‘Subnet Name’ field
OpenStack Dashboard (Horizon) 268
Undecided
New
#1940450 XSS The data-template attribute of the tooltip and popover plugins lacks input sanitization and may allow attacker to execute arbitrary JavaScript.
Ubuntu Cloud Archive 268
Undecided
Confirmed
#1955556 Javascript libraries with vulnerabilities
horizon (Ubuntu) 34
Undecided
New
#1980349 It is possible to trigger a POST-Request to any address via Horizon
OpenStack Dashboard (Horizon) 258
Undecided
Incomplete
#1980349 It is possible to trigger a POST-Request to any address via Horizon
OpenStack Security Advisory 258
Undecided
Incomplete
#1982676 Open redirect / phishing attack via "success_url" parameter in OpenStack
OpenStack Security Advisory 258
1 → 13 of 13 results First • Previous • Next • Last