CVE-2012-3540

Open redirect vulnerability in views/auth_forms.py in OpenStack Dashboard (Horizon) Essex (2012.1...

5.8 MediumFix available

CVE-2012-3540 is a medium vulnerability (CVSS 5.8) in Openstack Horizon, published September 5, 2012. No source lists public exploit code. EPSS puts the chance of exploitation in the next 30 days at 2.92%, the 87th percentile. Fixed in horizon 2012.1.1-4.

Open redirect vulnerability in views/auth_forms.py in OpenStack Dashboard (Horizon) Essex (2012.1) allows remote attackers to redirect users to arbitrary web sites and conduct phishing attacks via a URL in the next parameter to auth/login/. NOTE: this issue was originally assigned CVE-2012-3542 by mistake.

Exploit likelihood

2.92%Up 1.0 points since Jul 1, 2022

What each source reports

NVD Score used 5.8

Record: CVE-2012-3540
CVSS 2.0: 5.8 MediumAV:N/AC:M/Au:N/C:P/I:P/A:N
Weakness: CWE-20
Updated: 2026-11-02

CVE List No score

Record: CVE-2012-3540
Updated: 2026-11-02

EUVDEUVD-2012-0009 No score

Record: EUVD-2012-0009
Updated: 2026-11-03

GitHub AdvisoriesGHSA-j72v-mpwp-rg79 No score

Open redirect vulnerability in views/auth_forms.py in OpenStack Dashboard (Horizon) Essex (2012.1...

Record: GHSA-j72v-mpwp-rg79
Weakness: CWE-20
Updated: 2026-11-02

OSV No score

Record: CVE-2012-3540
Updated: 2026-11-02

OSVDEBIAN-CVE-2012-3540 No score

Record: DEBIAN-CVE-2012-3540
Updated: 2026-11-02

OSVPYSEC-2012-18 No score

Record: PYSEC-2012-18
Updated: 2026-11-02

Affected products

openstack horizon

Affected packages

Affected packages
Package	Affected	Fixed
`horizon` Debian:12	before 2012.1.1-4	2012.1.1-4
`horizon` Debian:13	before 2012.1.1-4	2012.1.1-4
`horizon` Debian:14	before 2012.1.1-4	2012.1.1-4
`horizon` PyPI	All versions, plus listed versions 12.0.212.0.312.0.413.0.013.0.0.0b3 Show 45 moreShow less 13.0.0.0rc113.0.0.0rc213.0.113.0.213.0.314.0.014.0.0.0b114.0.0.0b214.0.0.0b314.0.0.0rc114.0.0.0rc214.0.114.0.214.0.314.0.414.1.015.0.015.0.0.0b115.0.0.0b215.0.0.0rc115.0.0.0rc215.1.015.1.115.2.015.3.015.3.115.3.216.0.016.0.0.0b116.0.0.0b216.0.0.0rc116.0.0.0rc216.1.016.2.016.2.116.2.217.0.017.1.018.0.018.1.018.2.018.3.018.3.118.3.218.3.3	None known
`openstack-dashboard` Red Hat:openstack:1::el6	before 0:2012.1.1-3.el6	0:2012.1.1-3.el6
`python-django-horizon` Red Hat:openstack:1::el6	before 0:2012.1.1-3.el6	0:2012.1.1-3.el6
`python-django-horizon-doc` Red Hat:openstack:1::el6	before 0:2012.1.1-3.el6	0:2012.1.1-3.el6