Executive brief
Open Redirect vulnerability in Horizon Web Dashboard 19.4.0 thru 20.1.4 via the success_url parameter.
Affected products
- PyPI horizon
Junglewise Threat Intelligence
CVE-2022-45582: PYSEC-2023-153 - Open Redirect vulnerability in Horizon Web Dashboard 19.4.0 thru 20.1.4 via the success_url parameter.
CVE-2022-45582 · Severity: low · CVSS 3.1 · Published 2023-08-22
Technologies: horizon (PyPI). Vendors: PyPI.
Related threats
- PYSEC-2026-821 - OpenStack Horizon Cross-site Scripting (XSS)
- PYSEC-2026-822 - OpenStack Dashboard (aka Horizon) vulnerable to Cross-site Scripting
- PYSEC-2026-642 - Horizon-Orchestration Cross-site scripting (XSS) vulnerability through resource name
- PYSEC-2026-644 - OpenStack Horizon Cross-site scripting (XSS) vulnerability
- PYSEC-2026-641 - OpenStack Dashboard (Horizon) Cross-site scripting (XSS) vulnerability in the Host Aggregates interface