~ / search / GHSA-vqp6-j452-j6wp

GHSA-vqp6-j452-j6wp

Open Redirect in CPython that affects users of OpenStack Nova

Source: GitHub Advisory Database (reviewed) Moderate CVE-2021-3654

Packages

EcosystemPackageAffectedFixed in
PyPI nova < 21.2.3 21.2.3
PyPI nova >= 22.0.0, < 22.2.3 22.2.3
PyPI nova >= 23.0.0, < 23.0.3 23.0.3

Details

As written in the advisory (Markdown source, shown as plain text).

A vulnerability was found in CPython which is used by openstack-nova's console proxy, noVNC. By crafting a malicious URL, noVNC could be made to redirect to any desired URL.

References

External links from the advisory. They lead to third-party sites.