CVE-2020-29565

2 advisories.

PyPI/horizon CVE-2020-29565: medium 6.1, EPSS 1.43%

OpenStack Horizon Open redirect in workflow forms

Action: Upgrade horizon to 15.3.2 or later.

pip install horizon==15.3.2

pip install horizon==16.2.1

pip install horizon==18.3.3

pip install horizon==18.6.0

Affected

introduced	fixed	last affected
0	15.3.2	-
16.0.0	16.2.1	-
17.0.0	18.3.3	-
18.4.0	18.6.0	-

Fixed versions

15.3.2

16.2.1

18.3.3

18.6.0

Sources

CVE-2020-29565 · published 2022-05-24T17:35:25Z · modified 2024-09-20T22:01:39.240867Z · JSON

PyPI/horizon CVE-2020-29565: unknown, EPSS 1.43%

An issue was discovered in OpenStack Horizon before 15.3.2, 16.x before 16.2.1, 17.x and 18.x before 18.3.3, 18.4.x, and 18.5.x. There is a lack of validation of the "next" parameter, which would allo