Description
A vulnerability was found in openstack-nova's console proxy, noVNC. By crafting a malicious URL, noVNC could be made to redirect to any desired URL.
Affected products
| Vendor | Product | Affected | Fixed |
|---|---|---|---|
| — | openstack-nova | Affects - Nova: <21.2.3, >=22.0.0 <22.2.3, >=23.0.0 <23.0.3 | Fixed-In 21.2.3, 22.3.0, and 23.1.0 | — |
Fixed in Linux distributions
Distributions backport fixes, so the version that fixes this vulnerability differs per release — upgrade to at least the version shown. From the distributions' security trackers and advisories.
Debian
Security tracker ↗| Release | Package | Fixed in | Advisory |
|---|---|---|---|
| Debian 14 | nova | 2:23.0.2-3 | — |
| Debian 13 | nova | 2:23.0.2-3 | — |
| Debian 12 | nova | 2:23.0.2-3 | — |
Ubuntu
Security tracker ↗| Release | Package | Fixed in | Advisory |
|---|---|---|---|
| Ubuntu 20.04 LTS | nova | 2:21.2.4-0ubuntu2.1 | USN-5866-1 |
| Ubuntu 18.04 LTS | nova | 2:17.0.13-0ubuntu5.3 | USN-5866-1 |
Show 1 more (older releases, extended support, other products)Fewer releases
| Release | Package | Fixed in | Advisory |
|---|---|---|---|
| Ubuntu Pro 16.04 LTS | nova | 2:13.1.4-0ubuntu4.5+esm1 | USN-5866-1 |
Red Hat
Security tracker ↗| Release | Package | Fixed in | Advisory |
|---|---|---|---|
| Red Hat OpenStack 16 | python3-nova +11 | 1:20.4.1-1.20220112153422.1ee93b9.el8ost | RHSA-2022:0999, RHSA-2022:0983 |
Automated scanner template
A ready-made Nuclei template detects this vulnerability automatically. Vulnerabilities with public scanner templates are typically probed across the internet soon after the template appears — exposed systems should be patched first.
- Nova noVNC - Open Redirect http/cves/2021/CVE-2021-3654.yaml
Source: projectdiscovery/nuclei-templates (MIT) — updated daily. Only links are listed.
Affected packages
| Ecosystem | Package | Affected | Fixed | Record |
|---|---|---|---|---|
| PyPI | nova | < 21.2.3 | 21.2.3 | GHSA-vqp6-j452-j6wp |
| PyPI | nova | >= 22.0.0, < 22.2.3 | 22.2.3 | GHSA-vqp6-j452-j6wp |
| PyPI | nova | >= 23.0.0, < 23.0.3 | 23.0.3 | GHSA-vqp6-j452-j6wp |
| PyPI | nova | < 21.2.3 · >= 22.0.0, < 22.2.3 · >= 23.0.0, < 23.0.3 | 21.2.3, 22.2.3, 23.0.3 | PYSEC-2026-693 |
Advisories 4
- RHSA-2022:0999 Red Hat Security Advisory: Red Hat OpenStack Platform 16.2 (openstack-nova) security update Red Hat Security Advisories (RHSA) · Aug 8, 2026
- RHSA-2022:0983 Red Hat Security Advisory: Red Hat OpenStack Platform 16.1 (openstack-nova) security update Red Hat Security Advisories (RHSA) · Aug 8, 2026
- USN-5866-1 nova vulnerabilities Ubuntu Security Notices (USN) · Jun 25, 2026
- WID-SEC-2022-0250 Red Hat OpenStack: Mehrere Schwachstellen BSI CERT-Bund (WID) · Jul 21, 2025
References
- https://security.openstack.org/ossa/OSSA-2021-002.html
- https://bugs.launchpad.net/nova/+bug/1927677
- https://www.openwall.com/lists/oss-security/2021/07/29/2
- https://bugs.python.org/issue32084
- https://opendev.org/openstack/nova/commit/04d48527b62a35d912f93bc75613a6cca606df66
- https://opendev.org/openstack/nova/commit/8906552cfc2525a44251d4cf313ece61e57251eb
- https://bugzilla.redhat.com/show_bug.cgi?id=1961439
- GLSA-202305-02 vendor-advisory