Skip to content
OpenAdvisories
Medium RHSA-2020:5572 1 CVE

Red Hat Security Advisory: python-django-horizon security update

Published Sep 13, 2024 · Updated Jun 29, 2026

Ecosystem: Red Hat

Fixed packages 2

ReleasePackageFixed in
Red Hat · OpenStack 13 openstack:13::el7 openstack-dashboard 1:13.0.3-7.el7ost
Red Hat · OpenStack 13 openstack:13::el7 python-django-horizon 1:13.0.3-7.el7ost

Vulnerabilities 1

  • Medium 6.1
    CVE-2020-29565

    OpenStack Horizon Open redirect in workflow forms

    An issue was discovered in OpenStack Horizon before 15.3.2, 16.x before 16.2.1, 17.x and 18.x before 18.3.3, 18.4.x, and 18.5.x. There is a lack of validation of the "next" parameter, which would allow someone to supply a malicious URL in Horizon that can cau…

    horizon horizon horizon Debian Ubuntu PyPI

References

  • article
    https://access.redhat.com/security/updates/classification/#moderate
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=1811510
  • advisory
    https://security.access.redhat.com/data/csaf/v2/advisories/2020/rhsa-2020_5572.json
  • report
    https://access.redhat.com/security/cve/CVE-2020-29565
  • advisory
    https://www.cve.org/CVERecord?id=CVE-2020-29565
  • advisory
    https://nvd.nist.gov/vuln/detail/CVE-2020-29565
  • article
    https://www.openwall.com/lists/oss-security/2020/12/08/2