Open Redirect Vulnerability in Horizon Package
Summary
CVE-2012-3540: Open redirect vulnerability in views/auth_forms.py in OpenStack Dashboard (Horizon) Essex (2012.1) allows remote attackers to redirect users to arbitrary web sites and conduct phishing attacks via a URL in the next param... Affects horizon versions < 2012.1.1-4. Fixed in 2012.1.1-4. How to fix ↓
Check if this vulnerability affects your application
Upload a manifest or SBOM and we'll show whether you're affected, plus every other risky package in the same scan.
No signup required · Results in about 60 seconds
Background
Horizon is the official web-based dashboard for OpenStack, providing users with a graphical interface to manage cloud resources. It allows users to perform various tasks such as launching instances, managing networks, and accessing other OpenStack services. The vulnerability in question affects the Essex (2012.1) version of Horizon, specifically in the authentication forms, where improper validation of user input can lead to security risks.
Vulnerability Detail
The vulnerability identified as CVE-2012-3540 is an open redirect flaw located in the views/auth_forms.py file of the Horizon package. This issue allows remote attackers to manipulate the 'next' parameter in the auth/login URL, redirecting users to arbitrary external websites. This can facilitate phishing attacks, where users may be tricked into providing sensitive information on malicious sites. The vulnerability was mistakenly assigned CVE-2012-3542 initially, but it has been clarified as CVE-2012-3540.
How To Fix
Minimum fixed version
2012.1.1-4
This is the first release that contains the fix.
sudo apt-get install --only-upgrade horizonTip — Not sure which version your app runs? Vulert can match this fix to it. Scan free →
Workaround
As a temporary workaround, you can implement input validation on the 'next' parameter to ensure it only redirects to trusted URLs. This can be done by modifying the authentication view to check the parameter against a whitelist of allowed URLs.
Conclusion
The CVE-2012-3540 vulnerability in the Horizon package poses significant security risks due to its potential for facilitating phishing attacks. It is crucial for users to update their Horizon installations to the fixed version to mitigate these risks. Additionally, implementing input validation can serve as a temporary workaround while updates are applied.
See every vulnerability recorded for horizon →
FAQ
CVE-2012-3540 is an open redirect vulnerability in the Horizon package that allows attackers to redirect users to malicious websites.
If you are using Horizon version 2012.1 or earlier, you are likely affected. Check your package version using your package manager.
The primary risk is phishing attacks, where users may be tricked into providing sensitive information on a malicious site.
Yes, you can use Vulert to monitor your application for open-source vulnerabilities. It requires only a manifest file like package-lock.json.
You can use the Vulert playground at Vulert Scanner to check for vulnerabilities in your application without any signup.
Related vulnerabilities
Recent vulnerabilities recorded for horizon.
