CVE-2020-29565

CVE-2020-29565 is a medium-severity vulnerability affecting OpenStack Horizon versions before 15.3.2, 16.2.1, and 18.3.3, as well as Debian Linux distributions utilizing these versions. The flaw, categorized as CWE-601 (URL Redirection to Untrusted Site), stems from insufficient validation of the "next" parameter, enabling an attacker to craft a malicious URL that forces an automatic redirect to an arbitrary external site. This vulnerability has a CVSS score of 6.1, indicating a network-based attack with low complexity, requiring user interaction, and potentially leading to limited confidentiality and integrity impacts. There is no evidence of active exploitation, publicly available exploit code (Metasploit, Nuclei, ExploitDB), or significant community discussion or media coverage surrounding this CVE.