GHSA-r7pj-rvwg-vxhrMedium

OpenStack Image Registry and Delivery Service (Glance) Improper Input Validation vulnerability

Published
May 17, 2022
Last Modified
February 8, 2023

🔗 CVE IDs covered (1)

📋 Description

The Sheepdog backend in OpenStack Image Registry and Delivery Service (Glance) 2013.2 before 2013.2.4 and icehouse before icehouse-rc2 allows remote authenticated users with permission to insert or modify an image to execute arbitrary commands via a crafted location.

🎯 Affected products1

  • pip/glance:>= 2013.2, < 2013.2.4

🔗 References (9)