OpenStack Security Advisory

  1. Bug #1482371
  2. Comment #3

Comment 3 for bug 1482371

Revision history for this message
Nikhil Komawar (nikhil-komawar) wrote : Re: Image status can be changed by passing header 'x-image-meta-status' with PUT operation using v1

Possible solution is to validate the headers and give back a 400 if 'x-image-meta-status' key is found in the update call.