Red Hat Security Advisory

RHSA-2012:1380

python-django-horizon security update

Released 2012-10-16 · Red Hat rating Low · View on Red Hat →

Fixed in

RHOS Essex Release openstack-dashboard-2012.1.1-3.el6, python-django-horizon-2012.1.1-3.el6, python-django-horizon-doc-2012.1.1-3.el6

Fixes 1 record

TI-2012-03067 CVE-2012-3540 · GHSA-j72v-mpwp-rg79

Open redirect vulnerability in views/auth_forms.py in OpenStack Dashboard (Horizon) Essex…

LOW 31

Open redirect vulnerability in views/auth_forms.py in OpenStack Dashboard (Horizon) Essex (2012.1) allows remote attackers to redirect users to arbitrary web sites and conduct phishing attacks via a URL in the next param…

CVSS 2.0MEDIUM 5.8 Network No auth Interaction — EPSS 0.02908 Published 2012-09-05 Fixed CWE-20