GHSA-f8fh-xp28-q59m OpenStack Horizon Open redirect in workflow forms

• PyPI horizon: < 15.3.2 → fixed in 15.3.2 • PyPI horizon: >= 16.0.0, < 16.2.1 → fixed in 16.2.1 • PyPI horizon: >= 17.0.0, < 18.3.3 → fixed in 18.3.3 • PyPI horizon: >= 18.4.0, < 18.6.0 → fixed in 18.6.0

An issue was discovered in OpenStack Horizon before 15.3.2, 16.x before 16.2.1, 17.x and 18.x before 18.3.3, 18.4.x, and 18.5.x. There is a lack of validation of the "next" parameter, which would allow someone to supply a malicious URL in Horizon that can cause an automatic redirect to the provided malicious URL.