CVE-2022-45582

Advisory

Horizon 19.4.0, 20.1.4, 22.1.1 and 23.1.0 include a fix for an Open Redirect vulnerability.
https://bugs.launchpad.net/horizon/+bug/1982676

Affected package

Affected versions

Fixed versions

Vulnerability changelog

Open Redirect vulnerability in Horizon Web Dashboard 19.4.0 thru 20.1.4 via the success_url parameter. See CVE-2022-45582.


MISC:https://bugs.launchpad.net/horizon/+bug/1982676: https://bugs.launchpad.net/horizon/+bug/1982676
MISC:https://github.com/openstack/horizon/blob/master/horizon/workflows/views.py#L96-L102: https://github.com/openstack/horizon/blob/master/horizon/workflows/views.py#L96-L102

Resources

• https://bugs.launchpad.net/horizon/+bug/1982676
• https://github.com/openstack/horizon/blob/master/horizon/workflows/views.py#L96-L102
• https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-45582
• https://lists.debian.org/debian-lts-announce/2023/11/msg00033.html
• https://lists.debian.org/debian-lts-announce/2023/12/msg00000.html