Описание
A vulnerability was found in openstack-nova's console proxy, noVNC. By crafting a malicious URL, noVNC could be made to redirect to any desired URL.
Пакеты
| Пакет | Статус | Версия исправления | Релиз | Тип |
|---|---|---|---|---|
| nova | fixed | 2:23.0.2-3 | package | |
| nova | no-dsa | bullseye | package | |
| nova | no-dsa | buster | package | |
| nova | no-dsa | stretch | package |
Примечания
https://bugs.launchpad.net/nova/+bug/1927677
Errata: https://www.openwall.com/lists/oss-security/2021/09/27/1
EPSS
Связанные уязвимости
A vulnerability was found in openstack-nova's console proxy, noVNC. By crafting a malicious URL, noVNC could be made to redirect to any desired URL.
A vulnerability was found in openstack-nova's console proxy, noVNC. By crafting a malicious URL, noVNC could be made to redirect to any desired URL.
A vulnerability was found in openstack-nova's console proxy, noVNC. By crafting a malicious URL, noVNC could be made to redirect to any desired URL.
Open Redirect in CPython that affects users of OpenStack Nova
EPSS