Open Redirect in CPython that affects users of OpenStack Nova

Mô tả

Tham khảo

• nvd.nist.gov/vuln/detail/CVE-2021-3654 · ADVISORY
• bugs.launchpad.net/nova/+bug/1927677 · WEB
• bugs.python.org/issue32084 · WEB
• bugzilla.redhat.com/show_bug.cgi · WEB
• opendev.org/openstack/nova · PACKAGE
• opendev.org/openstack/nova/commit/04d48527b62a35d912f93bc75613a6cca606df66 · WEB
• opendev.org/openstack/nova/commit/8906552cfc2525a44251d4cf313ece61e57251eb · WEB
• security.gentoo.org/glsa/202305-02 · WEB
• security.openstack.org/ossa/OSSA-2021-002.html · WEB
• openwall.com/lists/oss-security/2021/07/29/2 · WEB
• pypi.org/project/nova · PACKAGE
• GitHub Advisory GHSA-vqp6-j452-j6wp · ADVISORY

Lỗ hổng khác của nova

• CVE-2026-46448CAO 8.5In OpenStack Nova before 33.0.2, the server create API does not strip certain hint data. The resulting instance has no Placement allocation.
• CVE-2026-24708CAO 8.2An issue was discovered in OpenStack Nova before 30.2.2, 31 before 31.2.1, and 32 before 32.1.1. By writing a malicious QCOW header to a roo…
• CVE-2024-40767TRUNG BÌNH 6.5In OpenStack Nova before 27.4.1, 28 before 28.2.1, and 29 before 29.1.1, by supplying a raw format image that is actually a crafted QCOW2 im…
• CVE-2024-32498TRUNG BÌNH 6.5An issue was discovered in OpenStack Cinder through 24.0.0, Glance before 28.0.2, and Nova before 29.0.3. Arbitrary file access can occur vi…
• CVE-2022-47951TRUNG BÌNH 5.7An issue was discovered in OpenStack Cinder before 19.1.2, 20.x before 20.0.2, and 21.0.0; Glance before 23.0.1, 24.x before 24.1.1, and 25.…