Описание
OpenStack Horizon before 25.7.4 produces scripts for OpenStack RC file downloading that may have a crafted project name with shell metacharacters. NOTE: some parties consider this a security hardening opportunity to address certain types of user error, not a vulnerability.
Пакеты
| Пакет | Статус | Версия исправления | Релиз | Тип |
|---|---|---|---|---|
| horizon | fixed | 3:25.7.3-2 | package | |
| horizon | fixed | 3:25.3.0-3+deb13u1 | trixie | package |
| horizon | fixed | 3:23.0.0-5+deb12u2 | bookworm | package |
| horizon | postponed | bullseye | package |
Примечания
https://wiki.openstack.org/wiki/OSSN/OSSN-0097
https://launchpad.net/bugs/2152240
EPSS
Связанные уязвимости
OpenStack Horizon before 25.7.4 produces scripts for OpenStack RC file downloading that may have a crafted project name with shell metacharacters. NOTE: some parties consider this a security hardening opportunity to address certain types of user error, not a vulnerability.
OpenStack Horizon before 25.7.4 produces scripts for OpenStack RC file downloading that may have a crafted project name with shell metacharacters. NOTE: some parties consider this a security hardening opportunity to address certain types of user error, not a vulnerability.
OpenStack Horizon before 25.7.4 produces scripts for OpenStack RC file downloading that may have a crafted project name with shell metacharacters. NOTE: some parties consider this a security hardening opportunity to address certain types of user error, not a vulnerability.
OpenStack Horizon RC file generation does not escape special characters in project names
EPSS