{"action":"Upgrade horizon to 15.3.2 or later.","affected":[{"fixed":"15.3.2","introduced":"15.3.0"},{"fixed":"16.2.1","introduced":"16.0.0"},{"fixed":"18.3.3","introduced":"17.0.0"},{"fixed":"18.6.0","introduced":"18.4.0"}],"component":"horizon","cve_ids":["CVE-2020-29565"],"ecosystem":"PyPI","epss":0.01429,"exploited":false,"fixed_versions":["15.3.2","16.2.1","18.3.3","18.6.0"],"ghsa_id":"GHSA-f8fh-xp28-q59m","id":"tcs_01M5KGANXYPWWSFAKPV6YY893C","modified_at":"2026-06-10T17:01:51.264142559Z","published_at":"2020-12-04T08:15:00Z","references":["https://osv.dev/vulnerability/PYSEC-2020-45","https://bugs.launchpad.net/horizon/+bug/1865026","https://review.opendev.org/c/openstack/horizon/+/758841/","https://review.opendev.org/c/openstack/horizon/+/758843/","https://security.openstack.org/ossa/OSSA-2020-008.html","http://www.openwall.com/lists/oss-security/2020/12/08/2","https://www.debian.org/security/2020/dsa-4820","https://github.com/advisories/GHSA-f8fh-xp28-q59m"],"severity":{"label":"unknown"},"sources":[{"source":"osv","source_id":"PYSEC-2020-45","url":"https://osv.dev/vulnerability/PYSEC-2020-45"}],"summary":"An issue was discovered in OpenStack Horizon before 15.3.2, 16.x before 16.2.1, 17.x and 18.x before 18.3.3, 18.4.x, and 18.5.x. There is a lack of validation of the \"next\" parameter, which would allo"}