{"action":"Upgrade horizon to 2013.2.4 or later.","affected":[{"fixed":"2013.2.4","introduced":"2013.2"}],"component":"horizon","cve_ids":["CVE-2014-0157"],"ecosystem":"PyPI","epss":0.01216,"exploited":false,"fixed_versions":["2013.2.4"],"ghsa_id":"GHSA-cmg8-5c63-pg95","id":"tcs_01M5KFDBCXXX7BX832EXRVREZ2","modified_at":"2026-07-07T11:56:32.874045571Z","published_at":"2022-05-14T02:09:21Z","references":["https://osv.dev/vulnerability/GHSA-cmg8-5c63-pg95","https://nvd.nist.gov/vuln/detail/CVE-2014-0157","https://access.redhat.com/errata/RHSA-2014:0581","https://access.redhat.com/security/cve/CVE-2014-0157","https://bugzilla.redhat.com/show_bug.cgi?id=1082858","https://launchpad.net/bugs/1289033","https://opendev.org/openstack/horizon","https://web.archive.org/web/20200228185211/http://www.securityfocus.com/bid/66706","http://lists.opensuse.org/opensuse-updates/2015-01/msg00040.html","http://www.openwall.com/lists/oss-security/2014/04/08/8"],"severity":{"label":"medium"},"sources":[{"source":"osv","source_id":"GHSA-cmg8-5c63-pg95","url":"https://osv.dev/vulnerability/GHSA-cmg8-5c63-pg95"}],"summary":"OpenStack Dashboard (aka Horizon) vulnerable to Cross-site Scripting"}