{
  "cveId": "CVE-2020-29565",
  "url": "https://patchblox.com/security/cve/CVE-2020-29565",
  "summary": "CVE-2020-29565 is fixed in 7 products on 1 platform, first by openstack-dashboard 3:13.0.3-0ubuntu2, released December 4, 2020. It is not reported as exploited. Patch Radar priority: Routine.",
  "title": "openstack-dashboard: An issue was discovered in OpenStack Horizon before 15.3.2, 16.x before 16.2.1, 17.x and 18.x before 18.3.3, 18.4.x,...",
  "description": "An issue was discovered in OpenStack Horizon before 15.3.2, 16.x before 16.2.1, 17.x and 18.x before 18.3.3, 18.4.x, and 18.5.x. There is a lack of validation of the \u0022next\u0022 parameter, which would allow someone to supply a malicious URL in Horizon that can cause an automatic redirect to the provided malicious URL.",
  "published": "2020-12-04T00:15:00Z",
  "severity": "Medium",
  "epss": 0.01423,
  "epssPercentile": 0.73048,
  "priority": "Routine",
  "priorityTier": 4,
  "exploited": false,
  "vendorExploited": false,
  "disclosed": false,
  "fixes": [
    {
      "platform": "linux",
      "product": "openstack-dashboard",
      "release": "Ubuntu 18.04.6 LTS (bionic)",
      "fixedVersion": "3:13.0.3-0ubuntu2",
      "fix": "openstack-dashboard 3:13.0.3-0ubuntu2",
      "url": "https://patchblox.com/security/fix/linux/ubuntu-bionic-openstack-dashboard-3-13.0.3-0ubuntu2",
      "released": "2020-12-04T00:15:00Z"
    },
    {
      "platform": "linux",
      "product": "openstack-dashboard",
      "release": "Ubuntu 20.04 LTS (focal)",
      "fixedVersion": "3:18.3.2-0ubuntu0.20.04.4",
      "fix": "openstack-dashboard 3:18.3.2-0ubuntu0.20.04.4",
      "url": "https://patchblox.com/security/fix/linux/ubuntu-focal-openstack-dashboard-3-18.3.2-0ubuntu0.20.04.4",
      "released": "2020-12-04T00:15:00Z"
    },
    {
      "platform": "linux",
      "product": "openstack-dashboard-common",
      "release": "Ubuntu 20.04 LTS (focal)",
      "fixedVersion": "3:18.3.2-0ubuntu0.20.04.4",
      "fix": "openstack-dashboard-common 3:18.3.2-0ubuntu0.20.04.4",
      "url": "https://patchblox.com/security/fix/linux/ubuntu-focal-openstack-dashboard-common-3-18.3.2-0ubuntu0.20.04.4",
      "released": "2020-12-04T00:15:00Z"
    },
    {
      "platform": "linux",
      "product": "openstack-dashboard-ubuntu-theme",
      "release": "Ubuntu 18.04.6 LTS (bionic)",
      "fixedVersion": "3:13.0.3-0ubuntu2",
      "fix": "openstack-dashboard-ubuntu-theme 3:13.0.3-0ubuntu2",
      "url": "https://patchblox.com/security/fix/linux/ubuntu-bionic-openstack-dashboard-ubuntu-theme-3-13.0.3-0ubuntu2",
      "released": "2020-12-04T00:15:00Z"
    },
    {
      "platform": "linux",
      "product": "openstack-dashboard-ubuntu-theme",
      "release": "Ubuntu 20.04 LTS (focal)",
      "fixedVersion": "3:18.3.2-0ubuntu0.20.04.4",
      "fix": "openstack-dashboard-ubuntu-theme 3:18.3.2-0ubuntu0.20.04.4",
      "url": "https://patchblox.com/security/fix/linux/ubuntu-focal-openstack-dashboard-ubuntu-theme-3-18.3.2-0ubuntu0.20.04.4",
      "released": "2020-12-04T00:15:00Z"
    },
    {
      "platform": "linux",
      "product": "python-django-horizon",
      "release": "Ubuntu 18.04.6 LTS (bionic)",
      "fixedVersion": "3:13.0.3-0ubuntu2",
      "fix": "python-django-horizon 3:13.0.3-0ubuntu2",
      "url": "https://patchblox.com/security/fix/linux/ubuntu-bionic-python-django-horizon-3-13.0.3-0ubuntu2",
      "released": "2020-12-04T00:15:00Z"
    },
    {
      "platform": "linux",
      "product": "python-django-openstack-auth",
      "release": "Ubuntu 18.04.6 LTS (bionic)",
      "fixedVersion": "3:13.0.3-0ubuntu2",
      "fix": "python-django-openstack-auth 3:13.0.3-0ubuntu2",
      "url": "https://patchblox.com/security/fix/linux/ubuntu-bionic-python-django-openstack-auth-3-13.0.3-0ubuntu2",
      "released": "2020-12-04T00:15:00Z"
    },
    {
      "platform": "linux",
      "product": "python3-django-horizon",
      "release": "Ubuntu 20.04 LTS (focal)",
      "fixedVersion": "3:18.3.2-0ubuntu0.20.04.4",
      "fix": "python3-django-horizon 3:18.3.2-0ubuntu0.20.04.4",
      "url": "https://patchblox.com/security/fix/linux/ubuntu-focal-python3-django-horizon-3-18.3.2-0ubuntu0.20.04.4",
      "released": "2020-12-04T00:15:00Z"
    },
    {
      "platform": "linux",
      "product": "python3-django-openstack-auth",
      "release": "Ubuntu 18.04.6 LTS (bionic)",
      "fixedVersion": "3:13.0.3-0ubuntu2",
      "fix": "python3-django-openstack-auth 3:13.0.3-0ubuntu2",
      "url": "https://patchblox.com/security/fix/linux/ubuntu-bionic-python3-django-openstack-auth-3-13.0.3-0ubuntu2",
      "released": "2020-12-04T00:15:00Z"
    },
    {
      "platform": "linux",
      "product": "python3-django-openstack-auth",
      "release": "Ubuntu 20.04 LTS (focal)",
      "fixedVersion": "3:18.3.2-0ubuntu0.20.04.4",
      "fix": "python3-django-openstack-auth 3:18.3.2-0ubuntu0.20.04.4",
      "url": "https://patchblox.com/security/fix/linux/ubuntu-focal-python3-django-openstack-auth-3-18.3.2-0ubuntu0.20.04.4",
      "released": "2020-12-04T00:15:00Z"
    }
  ],
  "noFixYet": [],
  "dataAsOf": "2026-11-08T00:53:09Z",
  "attribution": {
    "text": "Data: Patchblox Patch Radar",
    "url": "https://patchblox.com/security/patch-radar",
    "terms": "https://patchblox.com/security/patch-radar/use-the-data"
  }
}