{"action":"Upgrade horizon to 9.1.2 or later.","affected":[{"fixed":"9.1.2","introduced":"9.0"},{"fixed":"10.0.3","introduced":"10.0"},{"fixed":"11.0.1","introduced":"11.0.0"}],"component":"horizon","cve_ids":["CVE-2017-7400"],"ecosystem":"PyPI","epss":0.01063,"exploited":false,"fixed_versions":["9.1.2","10.0.3","11.0.1"],"ghsa_id":"GHSA-47vp-44v9-rhgq","id":"tcs_01M5KEXGWF333EK1YP3ZETNV5P","modified_at":"2026-07-07T11:56:09.035463651Z","published_at":"2022-05-14T03:53:47Z","references":["https://osv.dev/vulnerability/GHSA-47vp-44v9-rhgq","https://nvd.nist.gov/vuln/detail/CVE-2017-7400","https://access.redhat.com/errata/RHSA-2017:1598","https://access.redhat.com/errata/RHSA-2017:1739","https://launchpad.net/bugs/1667086","https://opendev.org/openstack/horizon/commit/1407cfe53144146b29679de21f28c952282043ae","https://opendev.org/openstack/horizon/commit/511b325b45b6bd7a88bb6df1a4639b80d0121277","https://opendev.org/openstack/horizon/commit/a835dbfbaa2c70329c08d4b8429d49315dc6d651","https://opendev.org/openstack/horizon/commit/ce80bb6fec3cb0262728e7ae8b9d695cf832e5bf","http://www.securityfocus.com/bid/97324"],"severity":{"label":"medium","score":4.8},"sources":[{"source":"osv","source_id":"GHSA-47vp-44v9-rhgq","url":"https://osv.dev/vulnerability/GHSA-47vp-44v9-rhgq"}],"summary":"OpenStack Horizon Cross-site Scripting (XSS)"}