OpenStack Security Advisory

  1. Bug #1606500
  2. Comment #2

Comment 2 for bug 1606500

Revision history for this message
Akihiro Motoki (amotoki) wrote : Re: Heat: template source URL allows network port scan

Could you share more detail on how to reproduce the issue reported?

I tried to reproduce it but I failed so far. What I did is as follows:
- Visit Horizon stack table page
- Click 'Launch Stack' button
- Select 'URL' as 'Template Source' and specify 'http://localhost:22' as 'Template URL'
- After clicking 'Next', I got '[Errno 104] Connection reset by peer' (as CLI returns)

Note that I used the master branch (newton) of Horizon code and python-heatclient (1.3.0).