GHSA-5pv6-rprw-82wv
Horizon Web Dashboard Open Redirect vulnerability
Packages
Details
As written in the advisory (Markdown source, shown as plain text).
Open Redirect vulnerability in Horizon Web Dashboard 19.4.0 thru 20.1.4 via the success_url parameter.
References
External links from the advisory. They lead to third-party sites.
- https://nvd.nist.gov/vuln/detail/CVE-2022-45582
- https://bugs.launchpad.net/horizon/+bug/1982676
- https://github.com/openstack/horizon
- https://github.com/openstack/horizon/blob/master/horizon/workflows/views.py#L96-L102
- https://github.com/pypa/advisory-database/tree/main/vulns/horizon/PYSEC-2023-153.yaml
- https://lists.debian.org/debian-lts-announce/2023/11/msg00033.html
- https://lists.debian.org/debian-lts-announce/2023/12/msg00000.html
- https://opendev.org/openstack/horizon/commit/79d139594290779b2f74ca894332aa7f2f7e4735