~ / search / GHSA-vxvf-xvm3-p8j5

GHSA-vxvf-xvm3-p8j5

OpenStack Horizon has Incorrect Behavior Order

Source: GitHub Advisory Database (reviewed) Moderate CVE-2026-43002

Packages

EcosystemPackageAffectedFixed in
PyPI horizon >= 25.6, < 25.7.3 25.7.3

Details

As written in the advisory (Markdown source, shown as plain text).

An issue was discovered in OpenStack Horizon 25.6 and 25.7 before 25.7.3. There is a write operation to the session storage backend before authentication and thus storage can be exhausted by unauthenticated requests. This is a regression of the CVE-2014-8124 fix.

References

External links from the advisory. They lead to third-party sites.