tocsin

PyPI/horizon CVE-2020-29565: unknown, EPSS 1.43%

An issue was discovered in OpenStack Horizon before 15.3.2, 16.x before 16.2.1, 17.x and 18.x before 18.3.3, 18.4.x, and 18.5.x. There is a lack of validation of the "next" parameter, which would allo

Action: Upgrade horizon to 15.3.2 or later.

pip install horizon==15.3.2
pip install horizon==16.2.1
pip install horizon==18.3.3
pip install horizon==18.6.0

Affected

introducedfixedlast affected
15.3.015.3.2-
16.0.016.2.1-
17.0.018.3.3-
18.4.018.6.0-

Fixed versions

15.3.216.2.118.3.318.6.0

Sources

CVE-2020-29565 · published · modified · JSON