CVE-2020-29565
04.12.2020, 08:15
An issue was discovered in OpenStack Horizon before 15.3.2, 16.x before 16.2.1, 17.x and 18.x before 18.3.3, 18.4.x, and 18.5.x. There is a lack of validation of the "next" parameter, which would allow someone to supply a malicious URL in Horizon that can cause an automatic redirect to the provided malicious URL.
| Vendor | Product | Version |
|---|---|---|
| openstack | horizon | 15.3.0 ≤ 𝑥 < 15.3.2 |
| openstack | horizon | 16.0.0 ≤ 𝑥 < 16.2.1 |
| openstack | horizon | 17.0.0 ≤ 𝑥 < 18.3.3 |
| openstack | horizon | 18.4.0 ≤ 𝑥 ≤ 18.5.0 |
| debian | debian_linux | 10.0 |
𝑥
= Vulnerable software versions
Debian Releases
Ubuntu Releases
Common Weakness Enumeration
References