Vulnerability Information
Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.
Vulnerability Title
N/A
Vulnerability Description
Open redirect vulnerability in views/auth_forms.py in OpenStack Dashboard (Horizon) Essex (2012.1) allows remote attackers to redirect users to arbitrary web sites and conduct phishing attacks via a URL in the next parameter to auth/login/. NOTE: this issue was originally assigned CVE-2012-3542 by mistake.
CVSS Information
N/A
Vulnerability Type
N/A
Vulnerability Title
OpenStack 输入验证错误漏洞
Vulnerability Description
OpenStack是美国美国国家航空航天局(NASA)的一个云平台管理项目。 OpenStack Dashboard (Horizon)提供了基本的用户接口管理OpenStack服务。OpenStack Dashboard Horizon中存在输入验证错误漏洞。攻击者利用该漏洞通过构造一个特制的URL并诱使用户跟随。当不知情受害者跟随链接,他们可被重定向到攻击者控制的网站,有助于钓鱼攻击。也可能存在其他攻击。
CVSS Information
N/A
Vulnerability Type
N/A