En bref
- CVE-2024-47211 est une vulnérabilité MOYENNE (CVSS 5.3) touchant ironic.
- Probabilité d'exploitation dans les 30 prochains jours (EPSS) : 0.66%, plus élevée que 51.7% des vulnérabilités.
- Correctif : mettre à jour vers 23.0.3, 24.1.3, 26.1.1 ou plus récent.
| Package | Affected versions | Patched versions |
|---|
| ironic PyPI | ≥ 22.0.0, < 23.0.3≥ 23.1.0, < 24.1.3≥ 25.0.0, < 26.1.1≤ 21.4.3< 23.0.3
| 23.0.324.1.326.1.1
|
Description
In OpenStack Ironic before 21.4.4, 22.x and 23.x before 23.0.3, 23.x and 24.x before 24.1.3, and 25.x and 26.x before 26.1.0, there is a lack of checksum validation of supplied image_source URLs when configured to convert images to a raw format for streaming.
NVD description
In OpenStack Ironic before 21.4.4, 22.x and 23.x before 23.0.3, 23.x and 24.x before 24.1.3, and 25.x and 26.x before 26.1.0, there is a lack of checksum validation of supplied image_source URLs when configured to convert images to a raw format for streaming.
Running one of these products? Scan your site to see whether it exposes a vulnerable version.
Scan my site free