OpenStack Security Advisory

  1. Bug #1779205
  2. Comment #5

Comment 5 for bug 1779205

Revision history for this message
Gage Hugo (gagehugo) wrote : Re: GET /v3/OS-FEDERATION/projects leaks project information

Agreed on Class A bug, should definitely fix/backport to all current active branches.

According to the docs, OS-FEDERATION/projects was deprecated in v1.1, would one option for fixing this be to disable it outright (have it return an empty list as to not break anyone)?