{"action":"No fix published. Pin and monitor.","affected":[{"introduced":"0"}],"component":"horizon","cve_ids":["CVE-2012-3540"],"ecosystem":"PyPI","epss":0.02908,"exploited":false,"fixed_versions":[],"id":"tcs_01M5KG5MWT1TFWGYVY11S4MW3D","modified_at":"2025-10-09T05:18:21.626755Z","published_at":"2012-09-05T23:55:00Z","references":["https://osv.dev/vulnerability/PYSEC-2012-18","https://github.com/openstack/horizon/commit/35eada8a27323c0f83c400177797927aba6bc99b","http://www.securityfocus.com/bid/55329","http://www.openwall.com/lists/oss-security/2012/08/30/5","http://secunia.com/advisories/50480","https://lists.launchpad.net/openstack/msg16278.html","https://lists.launchpad.net/openstack/msg16281.html","http://www.openwall.com/lists/oss-security/2012/08/30/4","https://bugs.launchpad.net/horizon/+bug/1039077","http://www.ubuntu.com/usn/USN-1565-1","https://exchange.xforce.ibmcloud.com/vulnerabilities/78196"],"severity":{"label":"unknown"},"sources":[{"source":"osv","source_id":"PYSEC-2012-18","url":"https://osv.dev/vulnerability/PYSEC-2012-18"}],"summary":"Open redirect vulnerability in views/auth_forms.py in OpenStack Dashboard (Horizon) Essex (2012.1) allows remote attackers to redirect users to arbitrary web sites and conduct phishing attacks via a U"}