Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

nvd логотип

CVE-2026-50589

Опубликовано: 05 июн. 2026
Источник: nvd
CVSS3: 5.3
CVSS3: 7.5
EPSS Низкий

Описание

In OpenStack Ironic 32 before 37.0.0, an unauthenticated malicious user could submit a crafted JSON string to some endpoints on the API or JSON-RPC service and effect a service crash.

Уязвимые конфигурации

Конфигурация 1
cpe:2.3:a:openstack:ironic:*:*:*:*:*:*:*:*
Версия от 32.0.0 (включая) до 37.0.0 (исключая)

EPSS

Процентиль: 36%
0.00433
Низкий

5.3 Medium

CVSS3

7.5 High

CVSS3

Дефекты

CWE-770
CWE-502

Связанные уязвимости

CVSS3: 5.3
ubuntu
2 месяца назад

In OpenStack Ironic 32 before 37.0.0, an unauthenticated malicious user could submit a crafted JSON string to some endpoints on the API or JSON-RPC service and effect a service crash.

CVSS3: 7.5
redhat
2 месяца назад

In OpenStack Ironic 32 before 37.0.0, an unauthenticated malicious user could submit a crafted JSON string to some endpoints on the API or JSON-RPC service and effect a service crash.

CVSS3: 5.3
debian
2 месяца назад

In OpenStack Ironic 32 before 37.0.0, an unauthenticated malicious use ...

CVSS3: 5.3
github
2 месяца назад

OpenStack Ironic: Crafted JSON String to Certain Endpoints on the API or JSON-RPC Service May Result in Service Crash

EPSS

Процентиль: 36%
0.00433
Низкий

5.3 Medium

CVSS3

7.5 High

CVSS3

Дефекты

CWE-770
CWE-502