Search for packages
| purl | pkg:deb/debian/horizon@3:14.0.2-3%2Bdeb10u2 |
| Next non-vulnerable version | 3:18.6.2-5+deb11u2 |
| Latest non-vulnerable version | 3:18.6.2-5+deb11u2 |
| Risk | 3.1 |
| Vulnerability | Summary | Fixed by |
|---|---|---|
|
VCID-bz2p-kcg8-nuc6
Aliases: CVE-2020-29565 GHSA-f8fh-xp28-q59m PYSEC-2020-45 |
An issue was discovered in OpenStack Horizon before 15.3.2, 16.x before 16.2.1, 17.x and 18.x before 18.3.3, 18.4.x, and 18.5.x. There is a lack of validation of the "next" parameter, which would allow someone to supply a malicious URL in Horizon that can cause an automatic redirect to the provided malicious URL. |
Affected by 0 other vulnerabilities. |
|
VCID-jg5v-wx6x-g3ah
Aliases: CVE-2022-45582 GHSA-5pv6-rprw-82wv PYSEC-2023-153 |
Open Redirect vulnerability in Horizon Web Dashboard 19.4.0 thru 20.1.4 via the success_url parameter. |
Affected by 0 other vulnerabilities. |
| Vulnerability | Summary | Aliases |
|---|---|---|
| VCID-bz2p-kcg8-nuc6 | An issue was discovered in OpenStack Horizon before 15.3.2, 16.x before 16.2.1, 17.x and 18.x before 18.3.3, 18.4.x, and 18.5.x. There is a lack of validation of the "next" parameter, which would allow someone to supply a malicious URL in Horizon that can cause an automatic redirect to the provided malicious URL. |
CVE-2020-29565
GHSA-f8fh-xp28-q59m PYSEC-2020-45 |