CVE-2020-29565 OpenStack Horizon Open redirect in workflow forms
Attackers can redirect users to malicious URLs via an unvalidated next parameter in OpenStack Horizon, potentially facilitating phishing attacks.
- Exploited in the wild
- Not known
- Login needed
- Not needed
- Attackable
- Over the internet
- Victim action needed
- A user has to click or open something
- Fix
- Available
What is CVE-2020-29565?
CVE-2020-29565 is a medium-severity vulnerability in Debian Debian Linux, published on 4 Dec 2020. An attacker can exploit it over the internet without logging in, and only if a user opens a file or follows a link.
Official description
An issue was discovered in OpenStack Horizon before 15.3.2, 16.x before 16.2.1, 17.x and 18.x before 18.3.3, 18.4.x, and 18.5.x. There is a lack of validation of the "next" parameter, which would allow someone to supply a malicious URL in Horizon that can cause an automatic redirect to the provided malicious URL.
Weakness: CWE-601
Which versions are affected by CVE-2020-29565?
9 open source packages ship an affected version, including horizon. It affects 2 products.
| Package | Affected | Fixed in |
|---|---|---|
horizon PyPI | All versions | 15.3.2 |
horizon PyPI | All versions | 15.3.2 |
horizon PyPI | From 15.3.0 | 15.3.2, 16.2.1, 18.3.3, 18.6.0 |
horizon PyPI | From 16.0.0 | 16.2.1 |
horizon PyPI | From 16.0.0 | 16.2.1 |
horizon PyPI | From 17.0.0 | 18.3.3 |
3 more packages
horizon PyPI | From 17.0.0 | 18.3.3 |
horizon PyPI | From 18.4.0 | 18.6.0 |
horizon PyPI | From 18.4.0 | 18.6.0 |
Linux distribution packages (11)
openstack-dashboard Red Hat:openstack:13::el7 | All versions | 1:13.0.3-7.el7ost |
python-django-horizon Red Hat:openstack:13::el7 | All versions | 1:13.0.3-7.el7ost |
openstack-dashboard Red Hat:openstack:16.1::el8 | All versions | 1:16.2.1-1.20201114033610.el8ost |
python-django-horizon Red Hat:openstack:16.1::el8 | All versions | 1:16.2.1-1.20201114033610.el8ost |
python3-django-horizon Red Hat:openstack:16.1::el8 | All versions | 1:16.2.1-1.20201114033610.el8ost |
openstack-dashboard SUSE:HPE Helion OpenStack 8 | All versions | 12.0.5~dev6-3.29.1 |
release-notes-hpe-helion-openstack SUSE:HPE Helion OpenStack 8 | All versions | 8.20201214-3.26.1 |
openstack-dashboard SUSE:OpenStack Cloud 8 | All versions | 12.0.5~dev6-3.29.1 |
release-notes-suse-openstack-cloud SUSE:OpenStack Cloud 8 | All versions | 8.20201214-3.26.1 |
openstack-dashboard SUSE:OpenStack Cloud Crowbar 8 | All versions | 12.0.5~dev6-3.29.1 |
release-notes-suse-openstack-cloud SUSE:OpenStack Cloud Crowbar 8 | All versions | 8.20201214-3.26.1 |
Products include Debian Debian Linux, Openstack Horizon.
How do I fix CVE-2020-29565?
Upgrade horizon to a fixed version for your release line: 15.3.2, 16.2.1, 18.3.3 or 18.6.0.
Is CVE-2020-29565 being exploited?
There is no known exploitation of CVE-2020-29565 in the wild and no public exploit code.
Other vulnerabilities in Debian Debian Linux
Sources
Also known as DEBIAN-CVE-2020-29565, DSA-4820-1, GHSA-f8fh-xp28-q59m, PYSEC-2020-45, RHSA-2020:5411, RHSA-2020:5572 and 3 more.