{"action":"Upgrade horizon to 15.3.2 or later.","affected":[{"fixed":"15.3.2","introduced":"0"},{"fixed":"16.2.1","introduced":"16.0.0"},{"fixed":"18.3.3","introduced":"17.0.0"},{"fixed":"18.6.0","introduced":"18.4.0"}],"component":"horizon","cve_ids":["CVE-2020-29565"],"ecosystem":"PyPI","epss":0.01429,"exploited":false,"fixed_versions":["15.3.2","16.2.1","18.3.3","18.6.0"],"ghsa_id":"GHSA-f8fh-xp28-q59m","id":"tcs_01M5KFETNWSYTPZ8X7RAPGN6XG","modified_at":"2024-09-20T22:01:39.240867Z","published_at":"2022-05-24T17:35:25Z","references":["https://osv.dev/vulnerability/GHSA-f8fh-xp28-q59m","https://nvd.nist.gov/vuln/detail/CVE-2020-29565","https://github.com/openstack/horizon/commit/252467100f75587e18df9c43ed5802ee8f0017fa","https://github.com/openstack/horizon/commit/6c208edf323ced07b15ec4bc3879bddb91d398bc","https://github.com/openstack/horizon/commit/9e0e333ab5277b6c396f602862ff90398cb0242b","https://github.com/openstack/horizon/commit/baa370f84332ad41502daea29a551705696f4421","https://bugs.launchpad.net/horizon/+bug/1865026","https://github.com/openstack/horizon","https://github.com/pypa/advisory-database/tree/main/vulns/horizon/PYSEC-2020-45.yaml","https://review.opendev.org/c/openstack/horizon/+/758841","https://review.opendev.org/c/openstack/horizon/+/758843","https://security.openstack.org/ossa/OSSA-2020-008.html","https://www.debian.org/security/2020/dsa-4820","http://www.openwall.com/lists/oss-security/2020/12/08/2"],"severity":{"label":"medium","score":6.1},"sources":[{"source":"osv","source_id":"GHSA-f8fh-xp28-q59m","url":"https://osv.dev/vulnerability/GHSA-f8fh-xp28-q59m"}],"summary":"OpenStack Horizon Open redirect in workflow forms"}