Open Redirect in CPython that affects users of OpenStack Nova

中 6.1CVE-2021-3654 · GHSA-vqp6-j452-j6wp · PYSEC-2026-693 · 02/03/2022 公開 · 17/06/2026 更新

パッケージ	影響を受けるバージョン	修正済みバージョン
nova PyPI	`≥ 22.0.0, < 22.2.3≥ 23.0.0, < 23.0.3< 21.2.3`	`22.2.323.0.321.2.3`
nova openstack	`≥ 22.0.0, < 22.2.3≥ 23.0.0, < 23.0.3< 21.2.3`	`22.2.323.0.321.2.3`
openstack platform redhat	`= 16.1= 16.2`	修正版なし

概要

A vulnerability was found in CPython which is used by openstack-nova's console proxy, noVNC. By crafting a malicious URL, noVNC could be made to redirect to any desired URL.

NVD の説明

A vulnerability was found in openstack-nova's console proxy, noVNC. By crafting a malicious URL, noVNC could be made to redirect to any desired URL.

参考情報

nvd.nist.gov/vuln/detail/CVE-2021-3654 · ADVISORY
bugs.launchpad.net/nova/+bug/1927677 · WEB
bugs.python.org/issue32084 · WEB
bugzilla.redhat.com/show_bug.cgi · WEB
opendev.org/openstack/nova · PACKAGE
opendev.org/openstack/nova/commit/04d48527b62a35d912f93bc75613a6cca606df66 · WEB
opendev.org/openstack/nova/commit/8906552cfc2525a44251d4cf313ece61e57251eb · WEB
security.gentoo.org/glsa/202305-02 · WEB
security.openstack.org/ossa/OSSA-2021-002.html · WEB
openwall.com/lists/oss-security/2021/07/29/2 · WEB
pypi.org/project/nova · PACKAGE
GitHub Advisory GHSA-vqp6-j452-j6wp · ADVISORY

これらの製品をお使いですか？サイトをスキャンして、脆弱なバージョンが公開されていないか確認しましょう。

無料でサイトをスキャン