CVE-2022-45582
Fixed in a distro release EPSS <1%
Open Redirect vulnerability in Horizon Web Dashboard 19.4.0 thru 20.1.4 via the success_url parameter.
Products: openstack horizon
Fixed upstream
| Ecosystem | Package | Fixed in |
|---|---|---|
| PyPI | horizon | 20.2.0 |
Distro releases
| Release | Package | Fixed in |
|---|---|---|
| Debian 10 | horizon | 3:14.0.2-3+deb10u3 |
| Debian 12 | horizon | 3:23.0.0-5+deb12u1 |
| Debian 13 | horizon | 3:23.1.0-3 |
| Debian 14 | horizon | 3:23.1.0-3 |
| Ubuntu 18.04 LTS | horizon | no fix |
| Ubuntu 22.04 LTS | horizon | no fix |
| Ubuntu Pro 20.04 LTS | horizon | no fix |