CVE-2022-45582
CVE-2022-45582
This page contains facts from public vulnerability sources. Check the original advisory before updating.
Open Redirect vulnerability in Horizon Web Dashboard 19.4.0 thru 20.1.4 via the success_url parameter.
CVSS 6.1 · Medium · EPSS 0.8% · Fix available
- Published
- Updated
Affected products and versions
n/a
- Versions
- n/a: Affected
No fix published
horizon Debian:12
- Versions
- 3:23.0.0-5
- Affected ranges
- ECOSYSTEM: < 3:23.0.0-5+deb12u1
Update to 3:23.0.0-5+deb12u1
horizon Debian:13
- Affected ranges
- ECOSYSTEM: < 3:23.1.0-3
Update to 3:23.1.0-3
horizon Debian:14
- Affected ranges
- ECOSYSTEM: < 3:23.1.0-3
Update to 3:23.1.0-3
horizon PyPI
- Versions
- 19.4.0
- 20.0.0
- 20.1.0
- 20.1.1
- 20.1.2
- 20.1.3
- 20.1.4
- Affected ranges
- ECOSYSTEM: ≥ 19.4.0, < 20.2.0
Update to 20.2.0
horizon Ubuntu:18.04:LTS
- Versions
- 3:12.0.0-0ubuntu2.1
- 3:12.0.0-0ubuntu3
- 3:13.0.0~b1-0ubuntu1
- 3:13.0.0~b1-0ubuntu2
- 3:13.0.0-0ubuntu1
- 3:13.0.0-0ubuntu1.1
- 3:13.0.1-0ubuntu1
- 3:13.0.1-0ubuntu2
- 3:13.0.1-0ubuntu3
- 3:13.0.1-0ubuntu4
- 3:13.0.1-0ubuntu5
- 3:13.0.1-0ubuntu6
- 3:13.0.2-0ubuntu1
- 3:13.0.2-0ubuntu2
- 3:13.0.2-0ubuntu3
- 3:13.0.3-0ubuntu1
- 3:13.0.3-0ubuntu2
- Affected ranges
- ECOSYSTEM: (−∞, +∞)
No fix published
horizon Ubuntu:Pro:20.04:LTS
- Versions
- 3:16.0.0-0ubuntu1
- 3:17.0.0~b1~git2019121712.f7313b74c-0ubuntu1
- 3:18.0.1~git2020021409.bb959361b-0ubuntu2
- 3:18.0.1~git2020021409.bb959361b-0ubuntu3
- 3:18.2.1~git2020032709.2c4470272-0ubuntu1
- 3:18.2.1~git2020041013.754804667-0ubuntu1
- 3:18.2.1~git2020041013.754804667-0ubuntu2
- 3:18.2.1~git2020041013.754804667-0ubuntu3
- 3:18.3.2-0ubuntu0.20.04.1
- 3:18.3.2-0ubuntu0.20.04.2
- 3:18.3.2-0ubuntu0.20.04.4
- 3:18.3.3-0ubuntu1
- 3:18.3.4-0ubuntu1
- 3:18.3.5-0ubuntu1
- 3:18.3.5-0ubuntu2
- 3:18.3.5-0ubuntu2.1
- 3:18.3.5-0ubuntu2.2
- 3:18.3.5-0ubuntu2.3
- 3:18.3.5-0ubuntu2.3+esm1
- Affected ranges
- ECOSYSTEM: (−∞, +∞)
No fix published
horizon Ubuntu:22.04:LTS
- Versions
- 4:20.1.0-0ubuntu1
- 4:20.2.0+git2021120911.fc1012628-0ubuntu1
- 4:20.2.0+git2022011216.8fe5bbc8d-0ubuntu1
- 4:21.0.0+git2022030313.dd9e4c82b-0ubuntu2
- 4:22.1.0-0ubuntu1
- 4:22.1.0-0ubuntu2
- 4:22.1.0-0ubuntu2.1
- 4:22.1.1-0ubuntu1
- 4:22.1.1-0ubuntu1.1
- Affected ranges
- ECOSYSTEM: (−∞, +∞)
No fix published
Original sources
- https://bugs.launchpad.net/horizon/+bug/1982676
- https://github.com/openstack/horizon/blob/master/horizon/workflows/views.py#L96-L102
- https://lists.debian.org/debian-lts-announce/2023/11/msg00033.html
- https://lists.debian.org/debian-lts-announce/2023/12/msg00000.html
- https://nvd.nist.gov/vuln/detail/CVE-2022-45582