A vulnerability was found in openstack-nova's console proxy, noVNC. By crafting a malicious URL, noVNC could be made to redirect to any desired URL.
CVSS Details
- CVSS 3.1 Base Score: 6.1
- CVSS 3.1 Vector: (CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Debian | — | Upgrade nova | Jul 30, 2024 | Mar 2, 2022 |
| Gentoo Linux | — | Upgrade dev-python/pypy3.Upgrade dev-lang/python. | May 4, 2023 | Mar 2, 2022 |
| Ubuntu | — | Upgrade python-nova (Ubuntu Pro)Upgrade python-novaUpgrade python3-novaUpgrade nova-common (Ubuntu Pro)Upgrade nova-common | Mar 22, 2023 | Mar 2, 2022 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub