Skip to content
OpenAdvisories

Product · OpenStack

Glance

3 known vulnerabilities.

1 result · Clear filters · Feed

  • Medium 5.0

    OpenStack Glance is affected by Server-Side Request Forgery (SSRF)

    OpenStack Glance before 29.1.1, 30.x before 30.1.1, and 31.0.0 is affected by Server-Side Request Forgery (SSRF). By use of HTTP redirects, an authenticated user can bypass URL validation checks and redirect to internal services. Only glance image import func…