CVE-2022-45582

published 2023-08-22

CVE-2022-45582: Open Redirect vulnerability in Horizon Web Dashboard 19.4.0 thru 20.1.4 via the success_url parameter.

Priority P4 24 medium 6.1 CVSS 3.1

AV N AC L PR N UI R S C C L I L A N

Open Redirect vulnerability in Horizon Web Dashboard 19.4.0 thru 20.1.4 via the success_url parameter.

Affected

7 ranges

Vendor	Product	Version range	Fixed in
debian	horizon	< horizon 3:23.0.0-5+deb12u1 (bookworm)	horizon 3:23.0.0-5+deb12u1 (bookworm)
openstack	horizon	>= 0 < 3:18.6.2-5+deb11u2	3:18.6.2-5+deb11u2
openstack	horizon	>= 0 < 3:23.0.0-5+deb12u1	3:23.0.0-5+deb12u1
openstack	horizon	>= 0 < 3:23.1.0-3	3:23.1.0-3
openstack	horizon	>= 0 < 3:23.1.0-3	3:23.1.0-3
openstack	horizon	>= 19.4.0 < 20.2.0	20.2.0
openstack	horizon	19.4.0 – 20.1.4	—

CVSS provenance

nvd v3.1 6.1 MEDIUM CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N

osv 6.1 MEDIUM

vendor_debian 6.1 MEDIUM

Stop checking back — get the weekly exploitation signal.

Every Monday: what got weaponized or added to CISA KEV in the last seven days — each CVE cross-linked to its PoC, Nuclei template, and detection rule. Free, one email a week, unsubscribe in one click.

CWE-601