CVE-2012-3540
Fixed in a distro release EPSS 3%
Open redirect vulnerability in views/auth_forms.py in OpenStack Dashboard (Horizon) Essex (2012.1) allows remote attackers to redirect users to arbitrary web sites and conduct phishing attacks via a URL in the next parameter to auth/login/. NOTE: this issue was originally assigned CVE-2012-3542 by mistake.
Products: openstack horizon
Fixed upstream
| Ecosystem | Package | Fixed in |
|---|---|---|
| PyPI | horizon | 35eada8a27323c0f83c400177797927aba6bc99b |
Distro releases
| Release | Package | Fixed in |
|---|---|---|
| Debian 12 | horizon | 2012.1.1-4 |
| Debian 13 | horizon | 2012.1.1-4 |
| Debian 14 | horizon | 2012.1.1-4 |
| Red Hat openstack 1 | openstack-dashboard | 0:2012.1.1-3.el6 |
| Red Hat openstack 1 | python-django-horizon | 0:2012.1.1-3.el6 |
| Red Hat openstack 1 | python-django-horizon-doc | 0:2012.1.1-3.el6 |