Horizon Web Dashboard Open Redirect vulnerability

MEDIUM 6.1CVE-2022-45582 · GHSA-5pv6-rprw-82wv · PYSEC-2023-153 · Published 22/08/2023 · updated 17/06/2026

Package	Affected versions	Patched versions
horizon PyPI	`≥ 19.4.0, < 20.2.0`	`20.2.0`
horizon openstack	`≥ 19.4.0, ≤ 20.1.4`	No fix yet

Description

Open Redirect vulnerability in Horizon Web Dashboard 19.4.0 thru 20.1.4 via the success_url parameter.

NVD description

Open Redirect vulnerability in Horizon Web Dashboard 19.4.0 thru 20.1.4 via the success_url parameter.

Running one of these products? Scan your site to see whether it exposes a vulnerable version.