CVE-2014-8124

OpenStack Dashboard (Horizon) before 2014.1.3 and 2014.2.x before 2014.2.1 does not properly...

5.0 MediumFix available

OpenStack Dashboard (Horizon) before 2014.1.3 and 2014.2.x before 2014.2.1 does not properly handle session records when using a db or memcached session engine, which allows remote attackers to cause a denial of service via a large number of requests to the login page.

Exploit likelihood

2.94%Up 1.5 points since Feb 4, 2022

What each source reports

NVD Score used 5.0

Record: CVE-2014-8124
CVSS 2.0: 5.0 MediumAV:N/AC:L/Au:N/C:N/I:N/A:P
Weakness: CWE-400
Updated: 2026-11-02

CVE List No score

Record: CVE-2014-8124
Updated: 2026-11-02

EUVDEUVD-2014-7968 No score

Record: EUVD-2014-7968
Updated: 2026-11-03

GitHub AdvisoriesGHSA-q878-vxpg-6qx6 No score

OpenStack Dashboard (Horizon) before 2014.1.3 and 2014.2.x before 2014.2.1 does not properly...

Record: GHSA-q878-vxpg-6qx6
Weakness: CWE-400
Updated: 2026-11-02

OSV No score

Record: CVE-2014-8124
Updated: 2026-11-02

OSVDEBIAN-CVE-2014-8124 No score

Record: DEBIAN-CVE-2014-8124
Updated: 2026-11-02

OSVSUSE-RU-2015:0410-1 No score

Security update for openstack-dashboard

This update for openstack-dashboard fixes a cross-site scripting issue on the unordered_list filter. (bnc#891815, CVE-2014-3594)

Security Issues:

* CVE-2014-3475
  <http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-3475>

Record: SUSE-RU-2015:0410-1
Updated: 2026-11-02

OSVUBUNTU-CVE-2014-8124 No score

Record: UBUNTU-CVE-2014-8124
Updated: 2026-11-02

Affected products

Affected packages

Affected packages
Package	Affected	Fixed
`horizon` Debian:12	before 2014.1.3-6	2014.1.3-6
`horizon` Debian:13	before 2014.1.3-6	2014.1.3-6
`horizon` Debian:14	before 2014.1.3-6	2014.1.3-6
`openstack-dashboard` Red Hat:openstack:5::el7	before 0:2014.1.4-1.el7ost	0:2014.1.4-1.el7ost
`openstack-dashboard-theme` Red Hat:openstack:5::el7	before 0:2014.1.4-1.el7ost	0:2014.1.4-1.el7ost
`python-django-horizon` Red Hat:openstack:5::el7	before 0:2014.1.4-1.el7ost	0:2014.1.4-1.el7ost
`python-django-horizon-doc` Red Hat:openstack:5::el7	before 0:2014.1.4-1.el7ost	0:2014.1.4-1.el7ost
`python-django-openstack-auth` Red Hat:openstack:5::el7	before 0:1.1.5-4.el7ost	0:1.1.5-4.el7ost
`openstack-dashboard` Red Hat:openstack:5::el6	before 0:2014.1.4-1.el6ost	0:2014.1.4-1.el6ost
`openstack-dashboard-theme` Red Hat:openstack:5::el6	before 0:2014.1.4-1.el6ost	0:2014.1.4-1.el6ost

Show 4 moreShow less

Affected packages
Package	Affected	Fixed
`python-django-horizon` Red Hat:openstack:5::el6	before 0:2014.1.4-1.el6ost	0:2014.1.4-1.el6ost
`python-django-horizon-doc` Red Hat:openstack:5::el6	before 0:2014.1.4-1.el6ost	0:2014.1.4-1.el6ost
`python-django-openstack-auth` Red Hat:openstack:5::el6	before 0:1.1.5-4.el6ost	0:1.1.5-4.el6ost
`horizon` Ubuntu:14.04:LTS	before 1:2014.1.4-0ubuntu2, plus listed versions 1:2013.2~rc3-0ubuntu11:2013.2-0ubuntu11:2014.1~b1-0ubuntu11:2014.1~b2-0ubuntu11:2014.1~b2-0ubuntu2 Show 10 moreShow less 1:2014.1~b3-0ubuntu11:2014.1~b3-0ubuntu21:2014.1~rc1-0ubuntu11:2014.1~rc2-0ubuntu11:2014.1-0ubuntu11:2014.1.1-0ubuntu11:2014.1.2-0ubuntu11:2014.1.2-0ubuntu1.11:2014.1.3-0ubuntu11:2014.1.3-0ubuntu2	1:2014.1.4-0ubuntu2

History

History
Recorded	Changed	Sources
Nov 3, 2026	aliases	EUVD
Nov 2, 2026	first indexed	CVE List, GitHub Advisories, NVD, OSV

Dates are when Every CVE recorded each change. Upstream dates may differ.

In short

CVE-2014-8124 is a medium vulnerability (CVSS 5.0) in Openstack Horizon, published August 28, 2014. No source lists public exploit code. EPSS puts the chance of exploitation in the next 30 days at 2.94%, the 87th percentile. Fixed in horizon 2014.1.3-6.

References

Show 29 moreShow less