GHSA-vqp6-j452-j6wpMediumCVSS 6.1

Open Redirect in CPython that affects users of OpenStack Nova

Published
March 4, 2022
Last Modified
May 3, 2023

🔗 CVE IDs covered (1)

CVE-2021-3654 →

📋 Description

A vulnerability was found in CPython which is used by openstack-nova's console proxy, noVNC. By crafting a malicious URL, noVNC could be made to redirect to any desired URL.

🎯 Affected products3

  • pip/nova:< 21.2.3
  • pip/nova:>= 22.0.0, < 22.2.3
  • pip/nova:>= 23.0.0, < 23.0.3

🔗 References (10)