{"action":"Upgrade horizon to 20.2.0 or later.","affected":[{"fixed":"20.2.0","introduced":"19.4.0"}],"component":"horizon","cve_ids":["CVE-2022-45582"],"ecosystem":"PyPI","epss":0.00795,"exploited":false,"fixed_versions":["20.2.0"],"ghsa_id":"GHSA-5pv6-rprw-82wv","id":"tcs_01M5KGJJMQ3PFWWQY1H2F4T806","modified_at":"2026-06-10T17:01:51.660267709Z","published_at":"2023-08-22T19:16:00Z","references":["https://osv.dev/vulnerability/PYSEC-2023-153","https://bugs.launchpad.net/horizon/+bug/1982676","https://github.com/openstack/horizon/blob/master/horizon/workflows/views.py#L96-L102","https://github.com/advisories/GHSA-5pv6-rprw-82wv"],"severity":{"label":"medium","score":6.1},"sources":[{"source":"osv","source_id":"PYSEC-2023-153","url":"https://osv.dev/vulnerability/PYSEC-2023-153"}],"summary":"Open Redirect vulnerability in Horizon Web Dashboard 19.4.0 thru 20.1.4 via the success_url parameter."}