CVE catalog

CVE-2020-29565

horizon: CVE-2020-29565

[CVE catalog]

Severity
Medium · CVSS 6.1CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N
Published
Source
[NVD] · [CVE record]
EPSS
1.43% · Oct 25, 2026

An issue was discovered in OpenStack Horizon before 15.3.2, 16.x before 16.2.1, 17.x and 18.x before 18.3.3, 18.4.x, and 18.5.x. There is a lack of validation of the "next" parameter, which would allow someone to supply a malicious URL in Horizon that can cause an automatic redirect to the provided malicious URL.

Vulnerable and fixed packages

Distribution-reported package versions and fixes. These do not depend on matching against the OpenFactory package catalog.

DistributionPackageReleaseVersionStatus
Debianhorizonsid3:27.0.0-4fixed
Debianhorizonforky3:27.0.0-4fixed
Debianhorizontrixie3:25.3.0-3+deb13u1fixed
Debianhorizonbookworm3:23.0.0-5+deb12u2fixed
Ubuntuhorizon16.042:8.0.0-0ubuntu2vulnerable
Ubuntuhorizon16.042:9.0.0~b1-0ubuntu1vulnerable
Ubuntuhorizon16.042:9.0.0~b1-0ubuntu2vulnerable
Ubuntuhorizon16.042:9.0.0~b2-0ubuntu1vulnerable
Ubuntuhorizon16.042:9.0.0~b3-0ubuntu1vulnerable
Ubuntuhorizon16.042:9.0.0~rc1-0ubuntu1vulnerable
Ubuntuhorizon16.042:9.0.0-0ubuntu1vulnerable
Ubuntuhorizon16.042:9.0.0-0ubuntu2vulnerable
Ubuntuhorizon16.042:9.0.0-0ubuntu2.16.04.1vulnerable
Ubuntuhorizon16.042:9.0.1-0ubuntu2vulnerable
Ubuntuhorizon16.042:9.1.0-0ubuntu1vulnerable
Ubuntuhorizon16.042:9.1.1-0ubuntu1vulnerable
Ubuntuhorizon16.042:9.1.2-0ubuntu1vulnerable
Ubuntuhorizon16.042:9.1.2-0ubuntu2vulnerable
Ubuntuhorizon16.042:9.1.2-0ubuntu3vulnerable
Ubuntuhorizon16.042:9.1.2-0ubuntu5vulnerable
Ubuntuhorizon16.042:9.1.2-0ubuntu5.2fixed
Ubuntuhorizon18.043:12.0.0-0ubuntu2.1vulnerable
Ubuntuhorizon18.043:12.0.0-0ubuntu3vulnerable
Ubuntuhorizon18.043:13.0.0~b1-0ubuntu1vulnerable
Ubuntuhorizon18.043:13.0.0~b1-0ubuntu2vulnerable
Ubuntuhorizon18.043:13.0.0-0ubuntu1vulnerable
Ubuntuhorizon18.043:13.0.0-0ubuntu1.1vulnerable
Ubuntuhorizon18.043:13.0.1-0ubuntu1vulnerable
Ubuntuhorizon18.043:13.0.1-0ubuntu2vulnerable
Ubuntuhorizon18.043:13.0.1-0ubuntu3vulnerable
Ubuntuhorizon18.043:13.0.1-0ubuntu4vulnerable
Ubuntuhorizon18.043:13.0.1-0ubuntu5vulnerable
Ubuntuhorizon18.043:13.0.1-0ubuntu6vulnerable
Ubuntuhorizon18.043:13.0.2-0ubuntu1vulnerable
Ubuntuhorizon18.043:13.0.2-0ubuntu2vulnerable
Ubuntuhorizon18.043:13.0.2-0ubuntu3vulnerable
Ubuntuhorizon18.043:13.0.3-0ubuntu1vulnerable
Ubuntuhorizon18.043:13.0.3-0ubuntu2fixed
Ubuntuhorizon20.043:16.0.0-0ubuntu1vulnerable
Ubuntuhorizon20.043:17.0.0~b1~git2019121712.f7313b74c-0ubuntu1vulnerable
Ubuntuhorizon20.043:18.0.1~git2020021409.bb959361b-0ubuntu2vulnerable
Ubuntuhorizon20.043:18.0.1~git2020021409.bb959361b-0ubuntu3vulnerable
Ubuntuhorizon20.043:18.2.1~git2020032709.2c4470272-0ubuntu1vulnerable
Ubuntuhorizon20.043:18.2.1~git2020041013.754804667-0ubuntu1vulnerable
Ubuntuhorizon20.043:18.2.1~git2020041013.754804667-0ubuntu2vulnerable
Ubuntuhorizon20.043:18.2.1~git2020041013.754804667-0ubuntu3vulnerable
Ubuntuhorizon20.043:18.3.2-0ubuntu0.20.04.1vulnerable
Ubuntuhorizon20.043:18.3.2-0ubuntu0.20.04.2vulnerable
Ubuntuhorizon20.043:18.3.2-0ubuntu0.20.04.4fixed
Ubuntuhorizon16.042:8.0.0-0ubuntu2vulnerable
Ubuntuhorizon16.042:9.0.0~b1-0ubuntu1vulnerable
Ubuntuhorizon16.042:9.0.0~b1-0ubuntu2vulnerable
Ubuntuhorizon16.042:9.0.0~b2-0ubuntu1vulnerable
Ubuntuhorizon16.042:9.0.0~b3-0ubuntu1vulnerable
Ubuntuhorizon16.042:9.0.0~rc1-0ubuntu1vulnerable
Ubuntuhorizon16.042:9.0.0-0ubuntu1vulnerable
Ubuntuhorizon16.042:9.0.0-0ubuntu2vulnerable
Ubuntuhorizon16.042:9.0.0-0ubuntu2.16.04.1vulnerable
Ubuntuhorizon16.042:9.0.1-0ubuntu2vulnerable
Ubuntuhorizon16.042:9.1.0-0ubuntu1vulnerable
Ubuntuhorizon16.042:9.1.1-0ubuntu1vulnerable
Ubuntuhorizon16.042:9.1.2-0ubuntu1vulnerable
Ubuntuhorizon16.042:9.1.2-0ubuntu2vulnerable
Ubuntuhorizon16.042:9.1.2-0ubuntu3vulnerable
Ubuntuhorizon16.042:9.1.2-0ubuntu5vulnerable
Ubuntuhorizon16.042:9.1.2-0ubuntu5.2fixed
Ubuntuhorizon18.043:12.0.0-0ubuntu2.1vulnerable
Ubuntuhorizon18.043:12.0.0-0ubuntu3vulnerable
Ubuntuhorizon18.043:13.0.0~b1-0ubuntu1vulnerable
Ubuntuhorizon18.043:13.0.0~b1-0ubuntu2vulnerable
Ubuntuhorizon18.043:13.0.0-0ubuntu1vulnerable
Ubuntuhorizon18.043:13.0.0-0ubuntu1.1vulnerable
Ubuntuhorizon18.043:13.0.1-0ubuntu1vulnerable
Ubuntuhorizon18.043:13.0.1-0ubuntu2vulnerable
Ubuntuhorizon18.043:13.0.1-0ubuntu3vulnerable
Ubuntuhorizon18.043:13.0.1-0ubuntu4vulnerable
Ubuntuhorizon18.043:13.0.1-0ubuntu5vulnerable
Ubuntuhorizon18.043:13.0.1-0ubuntu6vulnerable
Ubuntuhorizon18.043:13.0.2-0ubuntu1vulnerable
Ubuntuhorizon18.043:13.0.2-0ubuntu2vulnerable
Ubuntuhorizon18.043:13.0.2-0ubuntu3vulnerable
Ubuntuhorizon18.043:13.0.3-0ubuntu1vulnerable
Ubuntuhorizon18.043:13.0.3-0ubuntu2fixed
Ubuntuhorizon20.043:16.0.0-0ubuntu1vulnerable
Ubuntuhorizon20.043:17.0.0~b1~git2019121712.f7313b74c-0ubuntu1vulnerable
Ubuntuhorizon20.043:18.0.1~git2020021409.bb959361b-0ubuntu2vulnerable
Ubuntuhorizon20.043:18.0.1~git2020021409.bb959361b-0ubuntu3vulnerable
Ubuntuhorizon20.043:18.2.1~git2020032709.2c4470272-0ubuntu1vulnerable
Ubuntuhorizon20.043:18.2.1~git2020041013.754804667-0ubuntu1vulnerable
Ubuntuhorizon20.043:18.2.1~git2020041013.754804667-0ubuntu2vulnerable
Ubuntuhorizon20.043:18.2.1~git2020041013.754804667-0ubuntu3vulnerable
Ubuntuhorizon20.043:18.3.2-0ubuntu0.20.04.1vulnerable
Ubuntuhorizon20.043:18.3.2-0ubuntu0.20.04.2vulnerable
Ubuntuhorizon20.043:18.3.2-0ubuntu0.20.04.4fixed
Suseopenstack-dashboardhpe helion openstack 812.0.5~dev6-3.29.1fixed
Suserelease-notes-hpe-helion-openstackhpe helion openstack 88.20201214-3.26.1fixed
Suseopenstack-dashboardopenstack cloud 812.0.5~dev6-3.29.1fixed
Suserelease-notes-suse-openstack-cloudopenstack cloud 88.20201214-3.26.1fixed
Suseopenstack-dashboardopenstack cloud crowbar 812.0.5~dev6-3.29.1fixed
Suserelease-notes-suse-openstack-cloudopenstack cloud crowbar 88.20201214-3.26.1fixed

Fixed-version evidence

DistributionPackageTypeReleaseFixed versionUrgencyOriginBugs
Debianhorizonsourcesid3:18.6.1-1not yet assignedNot reported[976872]
Debianhorizonsourceforky3:18.6.1-1not yet assignedNot reported[976872]
Debianhorizonsourcetrixie3:18.6.1-1not yet assignedNot reported[976872]
Debianhorizonsourcebookworm3:18.6.1-1not yet assignedNot reported[976872]
Ubuntuhorizondeb16.042:9.1.2-0ubuntu5.2Not reportedUSN-4675-1Not reported
Ubuntuhorizondeb18.043:13.0.3-0ubuntu2Not reportedUSN-4675-1Not reported
Ubuntuhorizondeb20.043:18.3.2-0ubuntu0.20.04.4Not reportedUSN-4675-1Not reported
Ubuntuhorizondeb16.042:9.1.2-0ubuntu5.2Not reportedUBUNTU-CVE-2020-29565Not reported
Ubuntuhorizondeb18.043:13.0.3-0ubuntu2Not reportedUBUNTU-CVE-2020-29565Not reported
Ubuntuhorizondeb20.043:18.3.2-0ubuntu0.20.04.4Not reportedUBUNTU-CVE-2020-29565Not reported
Suseopenstack-dashboardrpmhpe helion openstack 812.0.5~dev6-3.29.1Not reportedSUSE-SU-2021:0099-1Not reported
Suserelease-notes-hpe-helion-openstackrpmhpe helion openstack 88.20201214-3.26.1Not reportedSUSE-SU-2021:0099-1Not reported
Suseopenstack-dashboardrpmopenstack cloud 812.0.5~dev6-3.29.1Not reportedSUSE-SU-2021:0099-1Not reported
Suserelease-notes-suse-openstack-cloudrpmopenstack cloud 88.20201214-3.26.1Not reportedSUSE-SU-2021:0099-1Not reported
Suseopenstack-dashboardrpmopenstack cloud crowbar 812.0.5~dev6-3.29.1Not reportedSUSE-SU-2021:0099-1Not reported
Suserelease-notes-suse-openstack-cloudrpmopenstack cloud crowbar 88.20201214-3.26.1Not reportedSUSE-SU-2021:0099-1Not reported

[Debian bug #976872]

OpenFactory catalog packages

[Debian 12 (Bookworm)]

  • [horizon-doc]Fixed

    Source package: [horizon]

    Details (2)

    • 3:23.0.0-5+deb12u2 · all · bookworm

      Fixed · Fixed: 3:18.6.1-1

      dsa · horizon · debian · bookworm; dsa · horizon · debian · 12

    • 3:23.0.0-5+deb12u2 · all · bookworm

      Fixed · Fixed: 3:18.6.1-1

      dsa · horizon · debian · bookworm; dsa · horizon · debian · 12

  • [openstack-dashboard]Fixed

    Source package: [horizon]

    Details (2)

    • 3:23.0.0-5+deb12u2 · all · bookworm

      Fixed · Fixed: 3:18.6.1-1

      dsa · horizon · debian · bookworm; dsa · horizon · debian · 12

    • 3:23.0.0-5+deb12u2 · all · bookworm

      Fixed · Fixed: 3:18.6.1-1

      dsa · horizon · debian · bookworm; dsa · horizon · debian · 12

  • [openstack-dashboard-apache]Fixed

    Source package: [horizon]

    Details (2)

    • 3:23.0.0-5+deb12u2 · all · bookworm

      Fixed · Fixed: 3:18.6.1-1

      dsa · horizon · debian · bookworm; dsa · horizon · debian · 12

    • 3:23.0.0-5+deb12u2 · all · bookworm

      Fixed · Fixed: 3:18.6.1-1

      dsa · horizon · debian · bookworm; dsa · horizon · debian · 12

  • [python3-django-horizon]Fixed

    Source package: [horizon]

    Details (2)

    • 3:23.0.0-5+deb12u2 · all · bookworm

      Fixed · Fixed: 3:18.6.1-1

      dsa · horizon · debian · bookworm; dsa · horizon · debian · 12

    • 3:23.0.0-5+deb12u2 · all · bookworm

      Fixed · Fixed: 3:18.6.1-1

      dsa · horizon · debian · bookworm; dsa · horizon · debian · 12

[Debian 13 (Trixie)]

  • [horizon-doc]Fixed

    Source package: [horizon]

    Details (2)

    • 3:25.3.0-3+deb13u1 · all · trixie

      Fixed · Fixed: 3:18.6.1-1

      dsa · horizon · debian · 13

    • 3:25.3.0-3+deb13u1 · all · trixie

      Fixed · Fixed: 3:18.6.1-1

      dsa · horizon · debian · 13

  • [openstack-dashboard]Fixed

    Source package: [horizon]

    Details (2)

    • 3:25.3.0-3+deb13u1 · all · trixie

      Fixed · Fixed: 3:18.6.1-1

      dsa · horizon · debian · 13

    • 3:25.3.0-3+deb13u1 · all · trixie

      Fixed · Fixed: 3:18.6.1-1

      dsa · horizon · debian · 13

  • [openstack-dashboard-apache]Fixed

    Source package: [horizon]

    Details (2)

    • 3:25.3.0-3+deb13u1 · all · trixie

      Fixed · Fixed: 3:18.6.1-1

      dsa · horizon · debian · 13

    • 3:25.3.0-3+deb13u1 · all · trixie

      Fixed · Fixed: 3:18.6.1-1

      dsa · horizon · debian · 13

  • [python3-django-horizon]Fixed

    Source package: [horizon]

    Details (2)

    • 3:25.3.0-3+deb13u1 · all · trixie

      Fixed · Fixed: 3:18.6.1-1

      dsa · horizon · debian · 13

    • 3:25.3.0-3+deb13u1 · all · trixie

      Fixed · Fixed: 3:18.6.1-1

      dsa · horizon · debian · 13

Observed:

References

[Debian Security Tracker] · [FIRST EPSS] · [OSV Package Vulnerability Database] · [Red Hat security advisories and VEX] · [SUSE security advisories and VEX]