[SECURITY] [DLA 3678-1] horizon security update - CORRECTED ANNOUNCEMENT

Debian LTS Advisory DLA-3678-1 [email protected] https://www.debian.org/lts/security/ Guilhem Moulin December 30, 2023 https://wiki.debian.org/LTS Package : horizon Version : 3:14.0.2-3+deb10u3 CVE ID : CVE-2022-45582 NB: The original message sent included the wrong DLA reference ID. Th...

Debian dla-3678 : horizon-doc - security update

The remote Debian 10 host has packages installed that are affected by a vulnerability as referenced in the dla-3678 advisory. ------------------------------------------------------------------------- Debian LTS Advisory DLA-3678-1 [email protected] https://www.debian.org/lts/security/...

[SECURITY] [DLA 3676-1] horizon security update

Debian LTS Advisory DLA-3676-1 [email protected] https://www.debian.org/lts/security/ Guilhem Moulin November 30, 2023 https://wiki.debian.org/LTS Package : horizon Version : 3:14.0.2-3+deb10u3 CVE ID : CVE-2022-45582 Phan Nguyên Long discovered an Open Redirect vulnerability in horizon...

CVE-2022-45582

Open Redirect vulnerability in Horizon Web Dashboard 19.4.0 thru 20.1.4 via the successurl parameter...

CVE-2022-45582

Open Redirect vulnerability in Horizon Web Dashboard 19.4.0 thru 20.1.4 via the successurl parameter...

CVE-2022-45582

CVE-2022-45582 describes an Open Redirect vulnerability in Horizon Web Dashboard (OpenStack) versions 19.4.0–20.1.4 exploitable via the success_url parameter. The issue is a redirect bypass/validation flaw that could enable phishing or credential-reuse scenarios if an attacker can redirect users ...

CVE-2022-45582

Open Redirect vulnerability in Horizon Web Dashboard 19.4.0 thru 20.1.4 via the successurl parameter...