Skip to content
OpenAdvisories
Medium USN-4675-1 1 CVE

horizon vulnerability

Published Jan 5, 2021 · Updated Feb 10, 2026

Ecosystem: Ubuntu

Summary

Pritam Singh discovered that OpenStack Horizon incorrectly validated
certain parameters. An attacker could possibly use this issue to cause
OpenStack Horizon to redirect to a malicious URL.

Fixed packages 3

ReleasePackageFixed in
Ubuntu · 16.04 LTS 16.04:LTS horizon 2:9.1.2-0ubuntu5.2
Ubuntu · 18.04 LTS 18.04:LTS horizon 3:13.0.3-0ubuntu2
Ubuntu · 20.04 LTS 20.04:LTS horizon 3:18.3.2-0ubuntu0.20.04.4

Vulnerabilities 1

  • Medium 6.1
    CVE-2020-29565

    OpenStack Horizon Open redirect in workflow forms

    An issue was discovered in OpenStack Horizon before 15.3.2, 16.x before 16.2.1, 17.x and 18.x before 18.3.3, 18.4.x, and 18.5.x. There is a lack of validation of the "next" parameter, which would allow someone to supply a malicious URL in Horizon that can cau…

    horizon horizon horizon Debian Ubuntu PyPI

References

  • report
    https://ubuntu.com/security/CVE-2020-29565