OpenStack Horizon lacks "next" parameter validation, allowing automatic redirect to a malicious UR
Reporter | Title | Published | Views | Family All 27 |
---|---|---|---|---|
![]() | CVE-2020-29565 | 4 Dec 202007:06 | – | cvelist |
![]() | Ubuntu 16.04 LTS / 18.04 LTS / 20.04 LTS : OpenStack Horizon vulnerability (USN-4675-1) | 5 Jan 202100:00 | – | nessus |
![]() | Debian DSA-4820-1 : horizon - security update | 29 Dec 202000:00 | – | nessus |
![]() | RHEL 8 : python-django-horizon (RHSA-2020:5411) | 18 Dec 202000:00 | – | nessus |
![]() | RHEL 7 : python-django-horizon (RHSA-2020:5572) | 18 Dec 202000:00 | – | nessus |
![]() | RHSA-2020:5411 Red Hat Security Advisory: python-django-horizon security update | 13 Sep 202415:41 | – | osv |
![]() | SUSE-SU-2021:0099-1 Security update for openstack-dashboard, release-notes-suse-openstack-cloud | 12 Jan 202118:47 | – | osv |
![]() | RHSA-2020:5572 Red Hat Security Advisory: python-django-horizon security update | 13 Sep 202415:40 | – | osv |
![]() | GHSA-F8FH-XP28-Q59M OpenStack Horizon Open redirect in workflow forms | 24 May 202217:35 | – | osv |
![]() | DSA-4820-1 horizon - security update | 27 Dec 202000:00 | – | osv |
Transform Your Security Services
Elevate your offerings with Vulners' advanced Vulnerability Intelligence. Contact us for a demo and discover the difference comprehensive, actionable intelligence can make in your security strategy.
Book a live demo